{"id":2227584,"url":"http://patchwork.ozlabs.org/api/patches/2227584/?format=json","web_url":"http://patchwork.ozlabs.org/project/linux-aspeed/patch/CAP_JKPter_ggMMvUY=pDZyZupSQb5KWGVPeig41Uw2wBDXepMg@mail.gmail.com/","project":{"id":57,"url":"http://patchwork.ozlabs.org/api/projects/57/?format=json","name":"Linux ASPEED SoC development","link_name":"linux-aspeed","list_id":"linux-aspeed.lists.ozlabs.org","list_email":"linux-aspeed@lists.ozlabs.org","web_url":"","scm_url":"","webscm_url":"","list_archive_url":"","list_archive_url_format":"","commit_url_format":""},"msgid":"","list_archive_url":null,"date":"2026-04-23T19:00:11","name":"soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read","commit_ref":null,"pull_url":null,"state":"new","archived":false,"hash":"e6e1aacc184674ddc0774fc268a97c709477fb43","submitter":{"id":93244,"url":"http://patchwork.ozlabs.org/api/people/93244/?format=json","name":"root","email":"karthiproffesional@gmail.com"},"delegate":null,"mbox":"http://patchwork.ozlabs.org/project/linux-aspeed/patch/CAP_JKPter_ggMMvUY=pDZyZupSQb5KWGVPeig41Uw2wBDXepMg@mail.gmail.com/mbox/","series":[{"id":501270,"url":"http://patchwork.ozlabs.org/api/series/501270/?format=json","web_url":"http://patchwork.ozlabs.org/project/linux-aspeed/list/?series=501270","date":"2026-04-23T19:00:11","name":"soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read","version":1,"mbox":"http://patchwork.ozlabs.org/series/501270/mbox/"}],"comments":"http://patchwork.ozlabs.org/api/patches/2227584/comments/","check":"pending","checks":"http://patchwork.ozlabs.org/api/patches/2227584/checks/","tags":{},"related":[],"headers":{"Return-Path":"\n ","X-Original-To":["incoming@patchwork.ozlabs.org","linux-aspeed@lists.ozlabs.org"],"Delivered-To":"patchwork-incoming@legolas.ozlabs.org","Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=gmail.com header.i=@gmail.com header.a=rsa-sha256\n header.s=20251104 header.b=ZKeimGo0;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=lists.ozlabs.org\n (client-ip=2404:9400:21b9:f100::1; helo=lists.ozlabs.org;\n envelope-from=linux-aspeed+bounces-3954-incoming=patchwork.ozlabs.org@lists.ozlabs.org;\n receiver=patchwork.ozlabs.org)","lists.ozlabs.org;\n arc=pass smtp.remote-ip=\"2a00:1450:4864:20::22d\" arc.chain=google.com","lists.ozlabs.org;\n dmarc=pass (p=none dis=none) header.from=gmail.com","lists.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=gmail.com header.i=@gmail.com header.a=rsa-sha256\n header.s=20251104 header.b=ZKeimGo0;\n\tdkim-atps=neutral","lists.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=gmail.com\n (client-ip=2a00:1450:4864:20::22d; helo=mail-lj1-x22d.google.com;\n envelope-from=karthiproffesional@gmail.com; receiver=lists.ozlabs.org)"],"Received":["from lists.ozlabs.org (lists.ozlabs.org\n [IPv6:2404:9400:21b9:f100::1])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1 raw public key)\n server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4g1vp13XRfz1yDD\n\tfor ; Fri, 24 Apr 2026 11:02:49 +1000 (AEST)","from boromir.ozlabs.org (localhost [127.0.0.1])\n\tby lists.ozlabs.org (Postfix) with ESMTP id 4g1vny3BTkz2ybQ;\n\tFri, 24 Apr 2026 11:02:46 +1000 (AEST)","from mail-lj1-x22d.google.com (mail-lj1-x22d.google.com\n [IPv6:2a00:1450:4864:20::22d])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature RSA-PSS (2048 bits) server-digest\n SHA256)\n\t(No client certificate requested)\n\tby lists.ozlabs.org (Postfix) with ESMTPS id 4g1lm40Xnlz2xSB\n\tfor ; Fri, 24 Apr 2026 05:00:35 +1000 (AEST)","by mail-lj1-x22d.google.com with SMTP id\n 38308e7fff4ca-38e7d983f50so78937591fa.1\n for ;\n Thu, 23 Apr 2026 12:00:35 -0700 (PDT)"],"ARC-Seal":["i=2; a=rsa-sha256; d=lists.ozlabs.org; s=201707; t=1776970837;\n\tcv=pass;\n b=Uenh9DSFQLv5zYpJKqEmC2ZgEAztZRFQQSEwtyDgCgYJRzvg/OzIqcBRVXmCJebBVm1doZFIUsPwmi7OwMpyIyYtUAnn7fgQAO8B09urPUWAqFPD77DtCjIEWC8dQw7+NGnMC+bXmAo1/9xYyCL82/VrJ3wUGXrqZlW0gfwjM4UiYH74rVAsKaKUWtzyPuRBym2atTv01Xs0+Etgfv3kEtYMdtSCoymXd71UrICBHirBRgdIwAuZZIYiFeXN26plhpu9CgohSUPqPLlr9umRieXHGxXFU8Lcs7BhPPpXK57wwnmZqGDb6BokJosL7ad9Ob4EMVsxpWcE9FtF5yHKzA==","i=1; a=rsa-sha256; t=1776970828; cv=none;\n d=google.com; s=arc-20240605;\n b=XiwpZp6JjiqzQrn8G9MOSBCF1OQWqxzfQ7RNCcvTJGL/kitJHRRhr24uubntzOJSoc\n LIl5odRLS7OIf7ExenQzcctdvzDJswBpMCFv0KeNP5eH4H/Y45yJBkTYM4QqF++6mw+j\n YUzXnN7Ts1FFy4AiV3EjWvYHMo/0U7gtSutqVf0fHVlg+AU3Vn0q41vKht71qHtf0Qbi\n 2e7r0U1qltHWy+wpOagMB+RSJWV0LcKSupEXVtFs3exI4EQ4eHUTKXr4QQG8oTFblmZn\n YcR3aL9A31WWIqxgzi0kmMBY8zQLmL7WD+eM31xJRNbTI3d5JyYrNBIyv9OtJ/lo3Hus\n vyGQ=="],"ARC-Message-Signature":["i=2; a=rsa-sha256; d=lists.ozlabs.org; s=201707;\n\tt=1776970837; c=relaxed/relaxed;\n\tbh=iaSZGDSTIt1t0vqnrwKkzM3vMPJqVoykTgkWKgeHifU=;\n\th=MIME-Version:From:Date:Message-ID:Subject:To:Cc:Content-Type;\n b=OUbOMVAnGJWSq/4HxrDsQC3OMunYR4fYL3TSGv4gymSQBehwWHWsZXTY9qdk0/O2NPD/ad8WF5WqulQQg+VcHtZecRYgV424O5wsNTKVoTbvrDHLQulwSVqArChhsrTHB56yGthftUvtCFuYwGSQ6BI3J4anUsmANyIphVsv1KzWFsDiB96UGeMqXkuezG00Bt8j3luNpxeGEkENlxClJ8ZbZQf5XzxQZ+hYb4CnUFi+yRPBMMbchyY/vRQPVag88dunLCQmJRp+zipozkTDyMOmPsfDwewq2z0Hie5YagrOZmasYWhgqXMW+8tepA2fJnT7k1mneL6ddePiDzYyog==","i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com;\n s=arc-20240605;\n h=cc:to:subject:message-id:date:from:mime-version:dkim-signature;\n bh=iaSZGDSTIt1t0vqnrwKkzM3vMPJqVoykTgkWKgeHifU=;\n fh=OfYKBNJpNTfJ7uHCjlUb3MEzh/4PPOOIoyT6ItS5CWA=;\n b=RgqfBeTci9J+8mVsDmKQl/2cCaOI6m4lNf/nNA0udLGoWZy2GuVgXSOUPRwWekJo2j\n U2Bqx6168b0Lfu87l1bbtaRFG3zTrT5EFmKhMTm5mbsJ9QaXzlBBLAaWQW5HBs8c7aYg\n qi011DK2OwkUHhzuMoOcIXw8oj2I4k1z6pknJMHTB3/RInimtP//BisE/fap2/zZmlhG\n bpgR5YNbtqRkfb1Tyq0byN//wvL9uarkEKbfzrj9eDOt0DNLLOcBlAydWNm04EYy5pi1\n JE7gpuVhJPMcWuaPj+UbtECdq0mzUaozLm4MKbXwFP5cCuX/eUT+cmuXI3i53n+aJ4O+\n gMbg==;\n darn=lists.ozlabs.org"],"ARC-Authentication-Results":["i=2; lists.ozlabs.org;\n dmarc=pass (p=none dis=none) header.from=gmail.com; dkim=pass (2048-bit key;\n unprotected) header.d=gmail.com header.i=@gmail.com header.a=rsa-sha256\n header.s=20251104 header.b=ZKeimGo0; dkim-atps=neutral;\n spf=pass (client-ip=2a00:1450:4864:20::22d; helo=mail-lj1-x22d.google.com;\n envelope-from=karthiproffesional@gmail.com;\n receiver=lists.ozlabs.org) smtp.mailfrom=gmail.com","i=1; mx.google.com; arc=none"],"DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=gmail.com; s=20251104; t=1776970828; x=1777575628;\n darn=lists.ozlabs.org;\n h=cc:to:subject:message-id:date:from:mime-version:from:to:cc:subject\n :date:message-id:reply-to;\n bh=iaSZGDSTIt1t0vqnrwKkzM3vMPJqVoykTgkWKgeHifU=;\n b=ZKeimGo0NpsM0LNtu6JhXoJ5+nWjIiTnTARuN2KAz0cspnVNNUxBPaJJ+tZ6RhGQz+\n O97GFm41VSCzeA7l1rE/VFlG6d2ttbBX6vLTGXJKk1d9q1rND57oa19BoIHG2RF74rIV\n quYVKxlQBYTPhTyIWYUJO+G9N/ypNCvu9gyJob0OHgM0BSBq5HG0B377zODC0SK5+0bY\n r2Uu2p+yizp3NvYza2OQFu44V79YuxITW1kP1lfvPhGrto2ZONzkjRhuS/TRD9tqceTf\n hkGiaM0XDjGnQiWqPTDsbPxDmigjyxcm5lqvBO6Y0VH30RQiSBhTM3+zLS/X+NEsXceg\n 9izg==","X-Google-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=1e100.net; s=20251104; t=1776970828; x=1777575628;\n h=cc:to:subject:message-id:date:from:mime-version:x-gm-gg\n :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;\n bh=iaSZGDSTIt1t0vqnrwKkzM3vMPJqVoykTgkWKgeHifU=;\n b=rrMB2vPI/6P+nzAEqyrtn35J+CdiKp6vnW0pgY2y+eBBV8I0CGbq6IBA6pNsA6EzUZ\n DBqiO905f3U6OSuB7/aPNVUVHZnjP8mrtJMLZitG07BdOpwg+SmzdXz/SxfYqOfVXPgF\n 69B3ijjDKW0wbg7EYcIArKQEzwBTReP97qtqLqmP8bS2pDYR24FBw1XL2pghBsNgIxsr\n c28RFt7g+n0WCocRvWQ/JJGiqxyS1UYI4n7aQeH2KBCa5Kir2tfpmiQquVPrlYip4mZU\n Qpvn4zqMxl0WyrxLKso4uxVlY7xbtkJjECLe9PbjzuCEwfQRvjqyb0+xkfAlUpDfscIl\n EcDA==","X-Forwarded-Encrypted":"i=1;\n AFNElJ9pocYmEqRQNrsMOxasq+tj0DQKsGi05M3ZmFjEjZ75N83OJkbkXeHy6WhYpygRyKW+fNhypVA/j+xgGtk=@lists.ozlabs.org","X-Gm-Message-State":"AOJu0YzO2DEtTqlQ7+tDK4wY7CsWM99kuy8BbzRTJ34K2bSgLfxk/51T\n\tOFQ+VOxeILUQBAPgLYMmQaGJAaxfbJjEf9xrz4YFkN418mmRhiUniyerYvNkuk2np8YYX9EXMdI\n\teeyXYuTwKAoXh+xXzlS7uiJT4cX1b4IE=","X-Gm-Gg":"AeBDietCK3o3TDSQLfk49jwZQo4BqdM8Ui2b2cjYkvuzu8ZnSYmwZSRq1hgzShezoEa\n\tZYRb8QD3WX1lExuG9Zlai8kfyoDUJFVUQRLWMj7sbGArVzMUZVMBt3fV8HWDhOYEYA3DeNgLhG6\n\tSRk2x8Rr6v4spznuQutQxF5UVEkQVTjM8kU8aQ+4xK3vI3jFkxgh87WSYYOy5raW6vjEcDuX01B\n\trJK7C/5pmg9wTvpV++yluTs+KFrs5ExKJ3mTwtrtFqKwQf7ZIG3S630i9rS9hY/tiWfQ643EctT\n\tEuBZOv+ibZs2hogBy0peNy9poWEPxe8Rw620pTHV5cpb/SrwvQ==","X-Received":"by 2002:a05:6512:3b8d:b0:5a4:19f3:f2bf with SMTP id\n 2adb3069b0e04-5a419f3f386mr8816464e87.24.1776970827228; Thu, 23 Apr 2026\n 12:00:27 -0700 (PDT)","X-Mailing-List":"linux-aspeed@lists.ozlabs.org","List-Id":"","List-Help":"","List-Owner":"","List-Post":"","List-Archive":",\n ","List-Subscribe":",\n ,\n ","List-Unsubscribe":"","Precedence":"list","MIME-Version":"1.0","From":"karthikeyan K S ","Date":"Fri, 24 Apr 2026 00:30:11 +0530","X-Gm-Features":"AQROBzAACTNKgczWUdLDKoK0N8p6t9ZSbvUCg1HXPCRwXkUzT9c4U3H7ST8sp-U","Message-ID":"\n ","Subject":"[PATCH] soc: aspeed: lpc-snoop: Fix usercopy overflow in\n snoop_file_read","To":"joel@jms.id.au, andrew@codeconstruct.com.au","Cc":"jdelvare@suse.de, linux-aspeed@lists.ozlabs.org,\n\tlinux-kernel@vger.kernel.org","Content-Type":"multipart/alternative; boundary=\"000000000000eee9cc06502542fe\"","X-Spam-Status":"No, score=-0.2 required=5.0 tests=ARC_SIGNED,ARC_VALID,\n\tDKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FREEMAIL_FROM,\n\tHTML_MESSAGE,RCVD_IN_DNSWL_NONE,SPF_HELO_NONE,SPF_PASS\n\tautolearn=disabled version=4.0.1","X-Spam-Checker-Version":"SpamAssassin 4.0.1 (2024-03-25) on lists.ozlabs.org"},"content":"From c50ff07baf2032ca12133775c61c50a38e8a2029 Mon Sep 17 00:00:00 2001\nFrom: Karthikeyan KS \nDate: Thu, 23 Apr 2026 21:26:08 +0300\nSubject: [PATCH] soc: aspeed: lpc-snoop: Fix usercopy overflow in\n snoop_file_read\n\nsnoop_file_read() passes the userspace count directly to\nkfifo_to_user() without clamping. The kfifo backing buffer is\n2048 bytes (SNOOP_FIFO_SIZE), allocated from kmalloc-2k slab.\nA read larger than 2048 bytes triggers a BUG under\nCONFIG_HARDENED_USERCOPY:\n\n kernel BUG at mm/usercopy.c:99!\n\nReproducer:\n hexdump /dev/aspeed-lpc-snoop0\n\nFix by clamping count to SNOOP_FIFO_SIZE before the copy.\n\nFixes: 3772e5da4454 (\"drivers/misc: Aspeed LPC snoop output using misc\nchardev\")\nCc: stable@vger.kernel.org\nSigned-off-by: Karthikeyan KS \n---\n drivers/soc/aspeed/aspeed-lpc-snoop.c | 1 +\n 1 file changed, 1 insertion(+)\n\n return ret;","diff":"diff --git a/drivers/soc/aspeed/aspeed-lpc-snoop.c\nb/drivers/soc/aspeed/aspeed-lpc-snoop.c\nindex b03310c0830d..5b59e826cc68 100644\n--- a/drivers/soc/aspeed/aspeed-lpc-snoop.c\n+++ b/drivers/soc/aspeed/aspeed-lpc-snoop.c\n@@ -125,6 +125,7 @@ static ssize_t snoop_file_read(struct file *file, char\n__user *buffer,\n if (ret == -ERESTARTSYS)\n return -EINTR;\n }\n+ count = min(count, (size_t)SNOOP_FIFO_SIZE);\n ret = kfifo_to_user(&chan->fifo, buffer, count, &copied);\n if (ret)\n","prefixes":[]}