Re: [RFC/PATCH 0/2] Backports CVE-2021-21781 for 4.4 and 4.9

On Fri, Jul 30, 2021 at 03:08:03PM +0900, Nobuhiro Iwamatsu wrote:

Hi,

This is a patch series to CVE-2021-21781. The patch 9c698bff66ab ("RM: ensure the signal page contains defined contents") depepds on memset32. However, this function is not provided in 4.4 and 4.9. Therefore, we need the patch 3b3c4babd898 ("lib/string.c: add multibyte memset functions") to apply this feature. Another option is to implement only the memset32 function in arch/arm/kernel/signal.c only or using loop memset, but for simplicity we have taken the way of applying the original patch 3b3c4babd898 ("lib/string.c: add multibyte memset functions") that provides memset32 in mainline kernel.

All now queued up, thanks.

greg k-h