{"id":2231283,"url":"http://patchwork.ozlabs.org/api/covers/2231283/?format=json","web_url":"http://patchwork.ozlabs.org/project/ltp/cover/20260430-cve-2026-31431-v2-0-1136c09ca67b@suse.com/","project":{"id":59,"url":"http://patchwork.ozlabs.org/api/projects/59/?format=json","name":"Linux Test Project development","link_name":"ltp","list_id":"ltp.lists.linux.it","list_email":"ltp@lists.linux.it","web_url":"","scm_url":"","webscm_url":"","list_archive_url":"","list_archive_url_format":"","commit_url_format":""},"msgid":"<20260430-cve-2026-31431-v2-0-1136c09ca67b@suse.com>","list_archive_url":null,"date":"2026-04-30T13:30:15","name":"[v2,0/2] cve-2026-31431 reproducer","submitter":{"id":83220,"url":"http://patchwork.ozlabs.org/api/people/83220/?format=json","name":"Andrea Cervesato","email":"andrea.cervesato@suse.de"},"mbox":"http://patchwork.ozlabs.org/project/ltp/cover/20260430-cve-2026-31431-v2-0-1136c09ca67b@suse.com/mbox/","series":[{"id":502306,"url":"http://patchwork.ozlabs.org/api/series/502306/?format=json","web_url":"http://patchwork.ozlabs.org/project/ltp/list/?series=502306","date":"2026-04-30T13:30:15","name":"cve-2026-31431 reproducer","version":2,"mbox":"http://patchwork.ozlabs.org/series/502306/mbox/"}],"comments":"http://patchwork.ozlabs.org/api/covers/2231283/comments/","headers":{"Return-Path":"<ltp-bounces+incoming=patchwork.ozlabs.org@lists.linux.it>","X-Original-To":["incoming@patchwork.ozlabs.org","ltp@lists.linux.it"],"Delivered-To":["patchwork-incoming@legolas.ozlabs.org","ltp@picard.linux.it"],"Authentication-Results":["legolas.ozlabs.org;\n\tdkim=fail reason=\"signature verification failed\" (1024-bit key;\n unprotected) header.d=suse.de header.i=@suse.de header.a=rsa-sha256\n header.s=susede2_rsa header.b=r0RF2bC+;\n\tdkim=fail reason=\"signature verification failed\" header.d=suse.de\n header.i=@suse.de header.a=ed25519-sha256 header.s=susede2_ed25519\n header.b=6JvY04MN;\n\tdkim=fail reason=\"signature verification failed\" (1024-bit key)\n header.d=suse.de header.i=@suse.de header.a=rsa-sha256 header.s=susede2_rsa\n header.b=r0RF2bC+;\n\tdkim=neutral header.d=suse.de header.i=@suse.de header.a=ed25519-sha256\n header.s=susede2_ed25519 header.b=6JvY04MN;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=lists.linux.it\n (client-ip=2001:1418:10:5::2; helo=picard.linux.it;\n envelope-from=ltp-bounces+incoming=patchwork.ozlabs.org@lists.linux.it;\n receiver=patchwork.ozlabs.org)","smtp-out1.suse.de;\n dkim=pass header.d=suse.de header.s=susede2_rsa header.b=r0RF2bC+;\n dkim=pass header.d=suse.de header.s=susede2_ed25519 header.b=6JvY04MN"],"Received":["from picard.linux.it (picard.linux.it [IPv6:2001:1418:10:5::2])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4g5w5w3s8Rz1yGq\n\tfor <incoming@patchwork.ozlabs.org>; Thu, 30 Apr 2026 23:30:27 +1000 (AEST)","from picard.linux.it (localhost [IPv6:::1])\n\tby picard.linux.it (Postfix) with ESMTP id 14A163E5955\n\tfor <incoming@patchwork.ozlabs.org>; Thu, 30 Apr 2026 15:30:25 +0200 (CEST)","from in-7.smtp.seeweb.it (in-7.smtp.seeweb.it [217.194.8.7])\n (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n key-exchange X25519 server-signature ECDSA (secp384r1))\n (No client certificate requested)\n by picard.linux.it (Postfix) with ESMTPS id 8F2BC3E1CB7\n for <ltp@lists.linux.it>; Thu, 30 Apr 2026 15:30:21 +0200 (CEST)","from smtp-out1.suse.de (smtp-out1.suse.de\n [IPv6:2a07:de40:b251:101:10:150:64:1])\n (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest\n SHA256)\n (No client certificate requested)\n by in-7.smtp.seeweb.it (Postfix) with ESMTPS id 19FF3200CF8\n for <ltp@lists.linux.it>; Thu, 30 Apr 2026 15:30:20 +0200 (CEST)","from imap1.dmz-prg2.suse.org (imap1.dmz-prg2.suse.org\n [IPv6:2a07:de40:b281:104:10:150:64:97])\n (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest\n SHA256)\n (No client certificate requested)\n by smtp-out1.suse.de (Postfix) with ESMTPS id C528B6A835;\n Thu, 30 Apr 2026 13:30:19 +0000 (UTC)","from imap1.dmz-prg2.suse.org (localhost [127.0.0.1])\n (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest\n SHA256)\n (No client certificate requested)\n by imap1.dmz-prg2.suse.org (Postfix) with ESMTPS id A3F47593B0;\n Thu, 30 Apr 2026 13:30:19 +0000 (UTC)","from dovecot-director2.suse.de ([2a07:de40:b281:106:10:150:64:167])\n by imap1.dmz-prg2.suse.org with ESMTPSA id YUuKJmtZ82luOAAAD6G6ig\n (envelope-from <andrea.cervesato@suse.de>); Thu, 30 Apr 2026 13:30:19 +0000"],"DKIM-Signature":["v=1; a=rsa-sha256; c=relaxed/relaxed; d=suse.de;\n s=susede2_rsa;\n t=1777555819;\n h=from:from:reply-to:date:date:message-id:message-id:to:to:cc:cc:\n mime-version:mime-version:content-type:content-type:\n content-transfer-encoding:content-transfer-encoding;\n bh=+JfFfVUmX4akmVf81HccVLex4nn3CrbOHqkobrKwBzM=;\n b=r0RF2bC+kkwo2T5pou4lS92ZP+7SxGLHqx2qTZJYZFyhY8ByrrQI6LLNktWwXYXbGF9LG6\n MN2+MQhzoB1kyTGfPIIA5gv5WHEqXYcGSsYiNvn74wbXmZQ16NdBXo0BtbLWMXQDeUXHFp\n nSbNmTt4aii+EN4+yA0xMfGx1wayIoM=","v=1; a=ed25519-sha256; c=relaxed/relaxed; d=suse.de;\n s=susede2_ed25519; t=1777555819;\n h=from:from:reply-to:date:date:message-id:message-id:to:to:cc:cc:\n mime-version:mime-version:content-type:content-type:\n content-transfer-encoding:content-transfer-encoding;\n bh=+JfFfVUmX4akmVf81HccVLex4nn3CrbOHqkobrKwBzM=;\n b=6JvY04MNkK3yjuEeAirflR4kKqlB4Lw+nHy1MZdsUKk6E8GXAbWlei+ud4BGh8r2xdnnU0\n 9vLI+klwkpp8PBBQ==","v=1; a=rsa-sha256; c=relaxed/relaxed; d=suse.de;\n s=susede2_rsa;\n t=1777555819;\n h=from:from:reply-to:date:date:message-id:message-id:to:to:cc:cc:\n mime-version:mime-version:content-type:content-type:\n content-transfer-encoding:content-transfer-encoding;\n bh=+JfFfVUmX4akmVf81HccVLex4nn3CrbOHqkobrKwBzM=;\n b=r0RF2bC+kkwo2T5pou4lS92ZP+7SxGLHqx2qTZJYZFyhY8ByrrQI6LLNktWwXYXbGF9LG6\n MN2+MQhzoB1kyTGfPIIA5gv5WHEqXYcGSsYiNvn74wbXmZQ16NdBXo0BtbLWMXQDeUXHFp\n nSbNmTt4aii+EN4+yA0xMfGx1wayIoM=","v=1; a=ed25519-sha256; c=relaxed/relaxed; d=suse.de;\n s=susede2_ed25519; t=1777555819;\n h=from:from:reply-to:date:date:message-id:message-id:to:to:cc:cc:\n mime-version:mime-version:content-type:content-type:\n content-transfer-encoding:content-transfer-encoding;\n bh=+JfFfVUmX4akmVf81HccVLex4nn3CrbOHqkobrKwBzM=;\n b=6JvY04MNkK3yjuEeAirflR4kKqlB4Lw+nHy1MZdsUKk6E8GXAbWlei+ud4BGh8r2xdnnU0\n 9vLI+klwkpp8PBBQ=="],"From":"Andrea Cervesato <andrea.cervesato@suse.de>","Date":"Thu, 30 Apr 2026 15:30:15 +0200","Message-Id":"<20260430-cve-2026-31431-v2-0-1136c09ca67b@suse.com>","MIME-Version":"1.0","X-B4-Tracking":"v=1; b=H4sIAGdZ82kC/3XMOw7CMBBF0a1EUzPIfwMV+0Apgj0hLogjGyxQ5\n L3jpKc8T3p3hUwpUIZLt0KiEnKIc4M4dOCmYX4QBt8MggnDlGToCuEGlFxJjuQHJc7Wa3N30E5\n LojF89uCtb55CfsX03fuFb+vfVOHI0Y7eceOEtid9ze9MRxef0Ndaf0qvINOrAAAA","X-Change-ID":"20260430-cve-2026-31431-eda4297d56bc","To":"Linux Test Project <ltp@lists.linux.it>","X-Mailer":"b4 0.14.2","X-Developer-Signature":"v=1; a=ed25519-sha256; t=1777555819; l=1002;\n i=andrea.cervesato@suse.com; s=20251210; h=from:subject:message-id;\n bh=SNixLH5rftVBM+kWhPLMTAb4Zo3h97HsYp4k046vJVY=;\n b=NqDJIpwc8Jl6sbx+53Q3bEJe2el3eBDUKDwpwLJoU4qpSvO+0Bww/o1ZMNe99Z8oH6G1cCxTX\n 41CaQNArVaEBYEBD8SlbepRWOTcKR93ZjdETkWQQVL81Km4NcIEbCSu","X-Developer-Key":"i=andrea.cervesato@suse.com; a=ed25519;\n pk=zKY+6GCauOiuHNZ//d8PQ/UL4jFCTKbXrzXAOQSLevI=","X-Spamd-Result":"default: False [-4.51 / 50.00]; BAYES_HAM(-3.00)[99.99%];\n NEURAL_HAM_LONG(-1.00)[-1.000];\n R_DKIM_ALLOW(-0.20)[suse.de:s=susede2_rsa,suse.de:s=susede2_ed25519];\n NEURAL_HAM_SHORT(-0.20)[-1.000]; MIME_GOOD(-0.10)[text/plain];\n MX_GOOD(-0.01)[]; RCVD_TLS_ALL(0.00)[];\n FUZZY_RATELIMITED(0.00)[rspamd.com];\n RCVD_VIA_SMTP_AUTH(0.00)[]; MIME_TRACE(0.00)[0:+];\n ARC_NA(0.00)[];\n SPAMHAUS_XBL(0.00)[2a07:de40:b281:104:10:150:64:97:from];\n DWL_DNSWL_BLOCKED(0.00)[suse.de:dkim];\n DNSWL_BLOCKED(0.00)[2a07:de40:b281:104:10:150:64:97:from,2a07:de40:b281:106:10:150:64:167:received];\n DKIM_SIGNED(0.00)[suse.de:s=susede2_rsa,suse.de:s=susede2_ed25519];\n FROM_EQ_ENVFROM(0.00)[]; FROM_HAS_DN(0.00)[];\n RCPT_COUNT_THREE(0.00)[3]; RCVD_COUNT_TWO(0.00)[2];\n TO_MATCH_ENVRCPT_ALL(0.00)[];\n DBL_BLOCKED_OPENRESOLVER(0.00)[suse.com:mid,suse.com:email,suse.de:dkim,imap1.dmz-prg2.suse.org:helo,imap1.dmz-prg2.suse.org:rdns];\n TO_DN_ALL(0.00)[]; DKIM_TRACE(0.00)[suse.de:+]","X-Rspamd-Action":"no action","X-Spam-Score":"-4.51","X-Spam-Level":"","X-Rspamd-Server":"rspamd1.dmz-prg2.suse.org","X-Rspamd-Queue-Id":"C528B6A835","X-Spam-Status":"No, score=0.1 required=7.0 tests=DKIM_SIGNED,DKIM_VALID,\n DKIM_VALID_AU,DKIM_VALID_EF,SPF_HELO_NONE,SPF_PASS shortcircuit=no\n autolearn=disabled version=4.0.1","X-Spam-Checker-Version":"SpamAssassin 4.0.1 (2024-03-25) on in-7.smtp.seeweb.it","X-Virus-Scanned":"clamav-milter 1.0.9 at in-7.smtp.seeweb.it","X-Virus-Status":"Clean","Subject":"[LTP] [PATCH v2 0/2] cve-2026-31431 reproducer","X-BeenThere":"ltp@lists.linux.it","X-Mailman-Version":"2.1.29","Precedence":"list","List-Id":"Linux Test Project <ltp.lists.linux.it>","List-Unsubscribe":"<https://lists.linux.it/options/ltp>,\n <mailto:ltp-request@lists.linux.it?subject=unsubscribe>","List-Archive":"<http://lists.linux.it/pipermail/ltp/>","List-Post":"<mailto:ltp@lists.linux.it>","List-Help":"<mailto:ltp-request@lists.linux.it?subject=help>","List-Subscribe":"<https://lists.linux.it/listinfo/ltp>,\n <mailto:ltp-request@lists.linux.it?subject=subscribe>","Content-Type":"text/plain; charset=\"us-ascii\"","Content-Transfer-Encoding":"7bit","Errors-To":"ltp-bounces+incoming=patchwork.ozlabs.org@lists.linux.it","Sender":"\"ltp\" <ltp-bounces+incoming=patchwork.ozlabs.org@lists.linux.it>"},"content":"Signed-off-by: Andrea Cervesato <andrea.cervesato@suse.com>\n---\nChanges in v2:\n- tst_alg_sendmsg(): fix msg_flags to be send by sendmsg()\n- cve-2026-31431 -> af_alg08\n- use tst_alg_sendmsg()\n- global fd cleanup\n- mode 0444\n- handle multiple -i iterations\n- Link to v1: https://lore.kernel.org/r/20260430-cve-2026-31431-v1-1-7fdc16c25785@suse.com\n\n---\nAndrea Cervesato (2):\n      tst_af_alg: fixed msg_flags to be the sendmsg() flags\n      cve-2026-31431: Add page cache corruption reproducer\n\n include/tst_af_alg.h               |   2 +-\n lib/tst_af_alg.c                   |   3 +-\n runtest/cve                        |   1 +\n testcases/kernel/crypto/.gitignore |   1 +\n testcases/kernel/crypto/af_alg08.c | 164 +++++++++++++++++++++++++++++++++++++\n 5 files changed, 168 insertions(+), 3 deletions(-)\n---\nbase-commit: 69b8169310425b8c5abd01d3fdb46f6d939e8a66\nchange-id: 20260430-cve-2026-31431-eda4297d56bc\n\nBest regards,"}