)]}'
{
  "commit": "bc4673e6c244aacbf51f6cff45459beec5173d82",
  "tree": "fec70d4a4710a76eaf6837164bd6f4a1c605c9f8",
  "parents": [
    "735e35e99f41ecd9768335aa0e3f0248e3850612"
  ],
  "author": {
    "name": "Peter Zijlstra",
    "email": "peterz@infradead.org",
    "time": "Wed Jul 31 18:31:05 2024 +0200"
  },
  "committer": {
    "name": "Shuo Yang",
    "email": "gshuoy@google.com",
    "time": "Mon Oct 07 21:09:50 2024 +0000"
  },
  "message": "x86/mm: Fix pti_clone_pgtable() alignment assumption\n\n[ Upstream commit 41e71dbb0e0a0fe214545fe64af031303a08524c ]\n\nGuenter reported dodgy crashes on an i386-nosmp build using GCC-11\nthat had the form of endless traps until entry stack exhaust and then\n#DF from the stack guard.\n\nIt turned out that pti_clone_pgtable() had alignment assumptions on\nthe start address, notably it hard assumes start is PMD aligned. This\nis true on x86_64, but very much not true on i386.\n\nThese assumptions can cause the end condition to malfunction, leading\nto a \u0027short\u0027 clone. Guess what happens when the user mapping has a\nshort copy of the entry text?\n\nUse the correct increment form for addr to avoid alignment\nassumptions.\n\nBUG\u003db/371693038\nTEST\u003dpresubmit\nRELEASE_NOTE\u003dFixed CVE-2024-44965 in the Linux kernel.\n\ncos-patch: security-moderate\nFixes: 16a3fe634f6a (\"x86/mm/pti: Clone kernel-image on PTE level for 32 bit\")\nReported-by: Guenter Roeck \u003clinux@roeck-us.net\u003e\nTested-by: Guenter Roeck \u003clinux@roeck-us.net\u003e\nSuggested-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nChange-Id: Ibc6ea31b54b5a30df456a557601c025e45362f81\nSigned-off-by: Peter Zijlstra (Intel) \u003cpeterz@infradead.org\u003e\nLink: https://lkml.kernel.org/r/20240731163105.GG33588@noisy.programming.kicks-ass.net\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\nSigned-off-by: Kernel CVE Triage Automation \u003ccloud-image-kernel-cve-triage-automation@prod.google.com\u003e\nReviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/82904\nTested-by: Cusky Presubmit Bot \u003cpresubmit@cos-infra-prod.iam.gserviceaccount.com\u003e\nReviewed-by: Shuo Yang \u003cgshuoy@google.com\u003e\nReviewed-by: Anil Altinay \u003caaltinay@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "51b6b78e6b1751b20b20323703ed4219a44d8ec7",
      "old_mode": 33188,
      "old_path": "arch/x86/mm/pti.c",
      "new_id": "f7d1bbe76eb94c5b1f745cb711d374bfbadd322a",
      "new_mode": 33188,
      "new_path": "arch/x86/mm/pti.c"
    }
  ]
}
