)]}'
{
  "commit": "6ec579da30fbf66a5294ee6af6d33bef9b8f6065",
  "tree": "fb5dd21f358ae4df7770a21628eb7b5d3868d634",
  "parents": [
    "d609ded5e17ce431d997b61838543822aae0d58a"
  ],
  "author": {
    "name": "Peter Zijlstra",
    "email": "peterz@infradead.org",
    "time": "Wed Jul 31 18:31:05 2024 +0200"
  },
  "committer": {
    "name": "Shuo Yang",
    "email": "gshuoy@google.com",
    "time": "Mon Oct 07 21:09:55 2024 +0000"
  },
  "message": "x86/mm: Fix pti_clone_pgtable() alignment assumption\n\n[ Upstream commit 41e71dbb0e0a0fe214545fe64af031303a08524c ]\n\nGuenter reported dodgy crashes on an i386-nosmp build using GCC-11\nthat had the form of endless traps until entry stack exhaust and then\n#DF from the stack guard.\n\nIt turned out that pti_clone_pgtable() had alignment assumptions on\nthe start address, notably it hard assumes start is PMD aligned. This\nis true on x86_64, but very much not true on i386.\n\nThese assumptions can cause the end condition to malfunction, leading\nto a \u0027short\u0027 clone. Guess what happens when the user mapping has a\nshort copy of the entry text?\n\nUse the correct increment form for addr to avoid alignment\nassumptions.\n\nBUG\u003db/371693561\nTEST\u003dpresubmit\nRELEASE_NOTE\u003dFixed CVE-2024-44965 in the Linux kernel.\n\ncos-patch: security-moderate\nFixes: 16a3fe634f6a (\"x86/mm/pti: Clone kernel-image on PTE level for 32 bit\")\nReported-by: Guenter Roeck \u003clinux@roeck-us.net\u003e\nTested-by: Guenter Roeck \u003clinux@roeck-us.net\u003e\nSuggested-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nChange-Id: Iba7e40f4e59351f78f44e09bf33fc31a350655dc\nSigned-off-by: Peter Zijlstra (Intel) \u003cpeterz@infradead.org\u003e\nLink: https://lkml.kernel.org/r/20240731163105.GG33588@noisy.programming.kicks-ass.net\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\nSigned-off-by: Kernel CVE Triage Automation \u003ccloud-image-kernel-cve-triage-automation@prod.google.com\u003e\nReviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/82928\nTested-by: Cusky Presubmit Bot \u003cpresubmit@cos-infra-prod.iam.gserviceaccount.com\u003e\nReviewed-by: Shuo Yang \u003cgshuoy@google.com\u003e\nReviewed-by: Anil Altinay \u003caaltinay@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "5d5c7bb50ce9e2e9646f783d26adb1e33ea094aa",
      "old_mode": 33188,
      "old_path": "arch/x86/mm/pti.c",
      "new_id": "c11c808eeac263e6701cb09ff5fdc24d91fcc464",
      "new_mode": 33188,
      "new_path": "arch/x86/mm/pti.c"
    }
  ]
}