Patch Detail
get:
Show a patch.
patch:
Update a patch.
put:
Update a patch.
GET /api/patches/2231260/?format=api
{ "id": 2231260, "url": "http://patchwork.ozlabs.org/api/patches/2231260/?format=api", "web_url": "http://patchwork.ozlabs.org/project/ubuntu-kernel/patch/4ccfd79065336714acc674813c0f2d23c216d813.1777550836.git.massimiliano.pellizzer@canonical.com/", "project": { "id": 15, "url": "http://patchwork.ozlabs.org/api/projects/15/?format=api", "name": "Ubuntu Kernel", "link_name": "ubuntu-kernel", "list_id": "kernel-team.lists.ubuntu.com", "list_email": "kernel-team@lists.ubuntu.com", "web_url": null, "scm_url": null, "webscm_url": null, "list_archive_url": "", "list_archive_url_format": "", "commit_url_format": "" }, "msgid": "<4ccfd79065336714acc674813c0f2d23c216d813.1777550836.git.massimiliano.pellizzer@canonical.com>", "list_archive_url": null, "date": "2026-04-30T12:30:23", "name": "[SRU,N,4/8] crypto: algif_aead - snapshot IV for async AEAD requests", "commit_ref": null, "pull_url": null, "state": "new", "archived": false, "hash": "f700dd15b243aa0668d43d0a7427a504d58d7cf6", "submitter": { "id": 89057, "url": "http://patchwork.ozlabs.org/api/people/89057/?format=api", "name": "Massimiliano Pellizzer", "email": "massimiliano.pellizzer@canonical.com" }, "delegate": null, "mbox": "http://patchwork.ozlabs.org/project/ubuntu-kernel/patch/4ccfd79065336714acc674813c0f2d23c216d813.1777550836.git.massimiliano.pellizzer@canonical.com/mbox/", "series": [ { "id": 502299, "url": "http://patchwork.ozlabs.org/api/series/502299/?format=api", "web_url": "http://patchwork.ozlabs.org/project/ubuntu-kernel/list/?series=502299", "date": "2026-04-30T12:30:20", "name": "CVE-2026-31431", "version": 1, "mbox": "http://patchwork.ozlabs.org/series/502299/mbox/" } ], "comments": "http://patchwork.ozlabs.org/api/patches/2231260/comments/", "check": "pending", "checks": "http://patchwork.ozlabs.org/api/patches/2231260/checks/", "tags": {}, "related": [], "headers": { "Return-Path": "<kernel-team-bounces@lists.ubuntu.com>", "X-Original-To": "incoming@patchwork.ozlabs.org", "Delivered-To": "patchwork-incoming@legolas.ozlabs.org", "Authentication-Results": [ "legolas.ozlabs.org;\n\tdkim=fail reason=\"signature verification failed\" (4096-bit key;\n unprotected) header.d=canonical.com header.i=@canonical.com\n header.a=rsa-sha256 header.s=20251003 header.b=gREubJPu;\n\tdkim-atps=neutral", "legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=lists.ubuntu.com\n (client-ip=185.125.189.65; helo=lists.ubuntu.com;\n envelope-from=kernel-team-bounces@lists.ubuntu.com;\n receiver=patchwork.ozlabs.org)" ], "Received": [ "from lists.ubuntu.com (lists.ubuntu.com [185.125.189.65])\n\t(using TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits))\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4g5tp62cWMz23h4\n\tfor <incoming@patchwork.ozlabs.org>; Thu, 30 Apr 2026 22:31:38 +1000 (AEST)", "from localhost ([127.0.0.1] helo=lists.ubuntu.com)\n\tby lists.ubuntu.com with esmtp (Exim 4.86_2)\n\t(envelope-from <kernel-team-bounces@lists.ubuntu.com>)\n\tid 1wIQYC-0004ek-UY; Thu, 30 Apr 2026 12:31:28 +0000", "from smtp-relay-internal-0.internal ([10.131.114.225]\n helo=smtp-relay-internal-0.canonical.com)\n by lists.ubuntu.com with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128)\n (Exim 4.86_2) (envelope-from <massimiliano.pellizzer@canonical.com>)\n id 1wIQYA-0004Yt-Tl\n for kernel-team@lists.ubuntu.com; Thu, 30 Apr 2026 12:31:26 +0000", "from mail-wm1-f70.google.com (mail-wm1-f70.google.com\n [209.85.128.70])\n (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest\n SHA256)\n (No client certificate requested)\n by smtp-relay-internal-0.canonical.com (Postfix) with ESMTPS id CC0BE3F427\n for <kernel-team@lists.ubuntu.com>; Thu, 30 Apr 2026 12:31:26 +0000 (UTC)", "by mail-wm1-f70.google.com with SMTP id\n 5b1f17b1804b1-488c0fcc6deso6954745e9.2\n for <kernel-team@lists.ubuntu.com>; Thu, 30 Apr 2026 05:31:26 -0700 (PDT)", "from tuxedo-infinitybook.ts.net\n (net-93-71-66-38.cust.vodafonedsl.it. [93.71.66.38])\n by smtp.gmail.com with ESMTPSA id\n 5b1f17b1804b1-48a81ed6bafsm103695005e9.2.2026.04.30.05.31.24\n for <kernel-team@lists.ubuntu.com>\n (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);\n Thu, 30 Apr 2026 05:31:24 -0700 (PDT)" ], "DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed; d=canonical.com;\n s=20251003; t=1777552286;\n bh=RK7HFJorRFNGM2M9MaEJUQlw8NKDsE5AlaW7o2cbskA=;\n h=From:To:Subject:Date:Message-ID:In-Reply-To:References:\n MIME-Version;\n b=gREubJPu1m+DZM+NC+7u/GAgtMhrUMgnVNwjWNe52md2sEW5U+RiyEfd+TagE/5Em\n IdUlLU7fi6TRgEuE0JfxynLKs1MGsLjZDdtpru5ocXYYI6iQV871mjUDcYE1cWEh4b\n nu8GQwzky2XELXYavHxESDmcbuQJyiQy4CRQLsuxpAeX7cgI8ugN9lu/eqw6F97sM+\n HYPjmaN5CxBRfr+V/TcoZHsveMdRUwl6eGN3o5VgtG9QZRqAiQZOYizH+hTdUkKfHV\n JHg05SjKm+zvw8Bb7Plwc1oYPuxabhoE6dFPrjjFKMnULFjeyxs14OxhFxv3jNpcSW\n J4a9EZUf7HbDeIOaD88ff18/4JSAVMAVZis8Lmm/0GJeNs8EzX4R36GKE0u0YwWcGB\n 3+HfqA5otnTZb4351eCBLHuqoEvhlByzDvis94f0IoFWrIONzxisrMvcNqo6mcqD1M\n YpMRHB7rid+knjWt7nYm7AK6njUR63c2LXMiUK4NR7T1yz6REeYHGQ/k9iXXyo6pvP\n wKE7YGLwkzT4djFT4ryQ4AKTsVoTc/JeRejSM2ebtEmhZHOs8DB3kS74MyK06k/eJ4\n bSIc8KVb7IznHF9Nmhz37fYnBgRrnq51YMuVIcpuZV/hppt1fCnO5H8DjSJmTHCbud\n ce99uaO3rPbN31QojCCMpSGE=", "X-Google-DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=1e100.net; s=20251104; t=1777552286; x=1778157086;\n h=content-transfer-encoding:mime-version:references:in-reply-to\n :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to\n :cc:subject:date:message-id:reply-to;\n bh=RK7HFJorRFNGM2M9MaEJUQlw8NKDsE5AlaW7o2cbskA=;\n b=eJ2yCaHa5gxGJ4xt6AaCBv0El+L0hqFLH/KhUkI9QeccQ/fYI1nHRwW4fG9q+DM4a/\n E44BXQe8qhqu9LUHDp0aLFnSQr1xg2MT/LGQw+peZt/rrEBsTemlv8kC2LnbdLF1pZKX\n KR/28usojSPE5Dv2axQ2bzXzMDPPMrRKfs1Lw0uMy2O1lgCkvsl8tgoiKkBwsQL6vAxL\n fOsXE2KcRhcDjuQx+JGngW1KLZyna98L3L9jOykJsSDlAlsoTiTesLrMw36S/pnha92t\n evP/1S+UN+fFSE802/UIh1E0H1KT2RnENh+8RP2fR5I2JrOQKmQ1rRg7PI4wb9ekj17Y\n +5jg==", "X-Gm-Message-State": "AOJu0YxxPNOMfR7Fb+efdKbZvHC0qQ9tIezAIwDzANxuGbhpRSGMVo4t\n xh0nyNvwd1lBx5MQNP+wWyb7rl8C+Zmzxl+BaBv4WOSYrz675B4ap6kGjGPMWTVS8QGYmdce2yA\n Z8VYtSwoKp6kJAzC0wU8TVTRxVOzLwXsHeIz0+Sj6Lo7e8Zl2JVciu6L/o3sEDvuk4YKbP+Ht8m\n g3zn0AH+P2TjMjHw==", "X-Gm-Gg": "AeBDieuaW3UZxRRhvoLLU35XWSPAKnLldm4abZDKnfn18ckX4MCCT62MAQKBRCprzLN\n 8oYgH871oWGPE1RCEigcshIu6iebUXyLgS7PGzjrMpPFq1DO8V32JqPNxrq3mBY16uUJZldWNTC\n xLxd+lQ/k4BWxZSkvguTotayiUO3pBSSTRjphofIL0vDMCaRG/nwRK0O/W384K+GXQTF/tqhhKF\n MFlXvLMnySnTKYCeutx9jh2oCix/91xhCvkAi8tKzYP8fu9jJkFnqChS70nD1ppDW2A8C6PH1qo\n C5c8bkY5lc8yvgVF0B1q/zO2KS8Sp6cb7diuMde0hhcalwCYkjKIg8on3eCOtqvT9nJ+geiCEpt\n qqAKnEy6cO4lNx3H5h7FCVvEhOVWAU2FTW8OVBExTK0yBIyeGwRI6kGJoUTRT1hOjwkjMphpU6W\n AtHSEKkdZY3hb3RwkSBnCsx/KE31aNwZ2sMPX9KDt/Yq8SLP0sCK3xd3SutxscyZjlmjemVzSIF\n kbr+dd8hCVTSaIiT1Eyw7A=", "X-Received": [ "by 2002:a05:600c:3508:b0:485:ae14:8191 with SMTP id\n 5b1f17b1804b1-48a83d6e22fmr41171505e9.5.1777552286028;\n Thu, 30 Apr 2026 05:31:26 -0700 (PDT)", "by 2002:a05:600c:3508:b0:485:ae14:8191 with SMTP id\n 5b1f17b1804b1-48a83d6e22fmr41170955e9.5.1777552285426;\n Thu, 30 Apr 2026 05:31:25 -0700 (PDT)" ], "From": "Massimiliano Pellizzer <massimiliano.pellizzer@canonical.com>", "To": "kernel-team@lists.ubuntu.com", "Subject": "[SRU][N][PATCH 4/8] crypto: algif_aead - snapshot IV for async AEAD\n requests", "Date": "Thu, 30 Apr 2026 14:30:23 +0200", "Message-ID": "\n <4ccfd79065336714acc674813c0f2d23c216d813.1777550836.git.massimiliano.pellizzer@canonical.com>", "X-Mailer": "git-send-email 2.53.0", "In-Reply-To": "<cover.1777550836.git.massimiliano.pellizzer@canonical.com>", "References": "\n <177754965576.503496.12142658280614619991@tuxedo-infinitybook.public>\n <cover.1777550836.git.massimiliano.pellizzer@canonical.com>", "MIME-Version": "1.0", "X-BeenThere": "kernel-team@lists.ubuntu.com", "X-Mailman-Version": "2.1.20", "Precedence": "list", "List-Id": "Kernel team discussions <kernel-team.lists.ubuntu.com>", "List-Unsubscribe": "<https://lists.ubuntu.com/mailman/options/kernel-team>,\n <mailto:kernel-team-request@lists.ubuntu.com?subject=unsubscribe>", "List-Archive": "<https://lists.ubuntu.com/archives/kernel-team>", "List-Post": "<mailto:kernel-team@lists.ubuntu.com>", "List-Help": "<mailto:kernel-team-request@lists.ubuntu.com?subject=help>", "List-Subscribe": "<https://lists.ubuntu.com/mailman/listinfo/kernel-team>,\n <mailto:kernel-team-request@lists.ubuntu.com?subject=subscribe>", "Content-Type": "text/plain; charset=\"utf-8\"", "Content-Transfer-Encoding": "base64", "Errors-To": "kernel-team-bounces@lists.ubuntu.com", "Sender": "\"kernel-team\" <kernel-team-bounces@lists.ubuntu.com>" }, "content": "From: Douya Le <ldy3087146292@gmail.com>\n\ncommit 5aa58c3a572b3e3b6c786953339f7978b845cc52 upstream.\n\nAF_ALG AEAD AIO requests currently use the socket-wide IV buffer during\nrequest processing. For async requests, later socket activity can\nupdate that shared state before the original request has fully\ncompleted, which can lead to inconsistent IV handling.\n\nSnapshot the IV into per-request storage when preparing the AEAD\nrequest, so in-flight operations no longer depend on mutable socket\nstate.\n\nFixes: d887c52d6ae4 (\"crypto: algif_aead - overhaul memory management\")\nCc: stable@kernel.org\nReported-by: Yuan Tan <yuantan098@gmail.com>\nReported-by: Yifan Wu <yifanwucs@gmail.com>\nReported-by: Juefei Pu <tomapufckgml@gmail.com>\nReported-by: Xin Liu <bird@lzu.edu.cn>\nCo-developed-by: Luxing Yin <tr0jan@lzu.edu.cn>\nSigned-off-by: Luxing Yin <tr0jan@lzu.edu.cn>\nTested-by: Yucheng Lu <kanolyc@gmail.com>\nSigned-off-by: Douya Le <ldy3087146292@gmail.com>\nSigned-off-by: Ren Wei <n05ec@lzu.edu.cn>\nSigned-off-by: Herbert Xu <herbert@gondor.apana.org.au>\nSigned-off-by: Eric Biggers <ebiggers@kernel.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>\n(cherry picked from commit 46fdb39e83227b5d39f7c934a0947ea913f13c18 linux-6.12.y)\nCVE-2026-31431\nSigned-off-by: Massimiliano Pellizzer <massimiliano.pellizzer@canonical.com>\n---\n crypto/algif_aead.c | 10 ++++++++--\n 1 file changed, 8 insertions(+), 2 deletions(-)", "diff": "diff --git a/crypto/algif_aead.c b/crypto/algif_aead.c\nindex dda15bb05e89..c54693d18832 100644\n--- a/crypto/algif_aead.c\n+++ b/crypto/algif_aead.c\n@@ -72,8 +72,10 @@ static int _aead_recvmsg(struct socket *sock, struct msghdr *msg,\n \tstruct af_alg_ctx *ctx = ask->private;\n \tstruct crypto_aead *tfm = pask->private;\n \tunsigned int as = crypto_aead_authsize(tfm);\n+\tunsigned int ivsize = crypto_aead_ivsize(tfm);\n \tstruct af_alg_async_req *areq;\n \tstruct scatterlist *rsgl_src, *tsgl_src = NULL;\n+\tvoid *iv;\n \tint err = 0;\n \tsize_t used = 0;\t\t/* [in] TX bufs to be en/decrypted */\n \tsize_t outlen = 0;\t\t/* [out] RX bufs produced by kernel */\n@@ -125,10 +127,14 @@ static int _aead_recvmsg(struct socket *sock, struct msghdr *msg,\n \n \t/* Allocate cipher request for current operation. */\n \tareq = af_alg_alloc_areq(sk, sizeof(struct af_alg_async_req) +\n-\t\t\t\t crypto_aead_reqsize(tfm));\n+\t\t\t\t crypto_aead_reqsize(tfm) + ivsize);\n \tif (IS_ERR(areq))\n \t\treturn PTR_ERR(areq);\n \n+\tiv = (u8 *)aead_request_ctx(&areq->cra_u.aead_req) +\n+\t crypto_aead_reqsize(tfm);\n+\tmemcpy(iv, ctx->iv, ivsize);\n+\n \t/* convert iovecs of output buffers into RX SGL */\n \terr = af_alg_get_rsgl(sk, msg, flags, areq, outlen, &usedpages);\n \tif (err)\n@@ -187,7 +193,7 @@ static int _aead_recvmsg(struct socket *sock, struct msghdr *msg,\n \n \t/* Initialize the crypto operation */\n \taead_request_set_crypt(&areq->cra_u.aead_req, tsgl_src,\n-\t\t\t areq->first_rsgl.sgl.sgt.sgl, used, ctx->iv);\n+\t\t\t areq->first_rsgl.sgl.sgt.sgl, used, iv);\n \taead_request_set_ad(&areq->cra_u.aead_req, ctx->aead_assoclen);\n \taead_request_set_tfm(&areq->cra_u.aead_req, tfm);\n \n", "prefixes": [ "SRU", "N", "4/8" ] }