{"id":2227585,"url":"http://patchwork.ozlabs.org/api/patches/2227585/?format=json","web_url":"http://patchwork.ozlabs.org/project/linux-aspeed/patch/20260423192045.5729-1-root@LAPTOP-97G9G880.localdomain/","project":{"id":57,"url":"http://patchwork.ozlabs.org/api/projects/57/?format=json","name":"Linux ASPEED SoC development","link_name":"linux-aspeed","list_id":"linux-aspeed.lists.ozlabs.org","list_email":"linux-aspeed@lists.ozlabs.org","web_url":"","scm_url":"","webscm_url":"","list_archive_url":"","list_archive_url_format":"","commit_url_format":""},"msgid":"<20260423192045.5729-1-root@LAPTOP-97G9G880.localdomain>","list_archive_url":null,"date":"2026-04-23T19:20:45","name":"soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read","commit_ref":null,"pull_url":null,"state":"new","archived":false,"hash":"77ffdc76cd2dc2ac67c51be2b8b103b070630d58","submitter":{"id":93244,"url":"http://patchwork.ozlabs.org/api/people/93244/?format=json","name":"root","email":"karthiproffesional@gmail.com"},"delegate":null,"mbox":"http://patchwork.ozlabs.org/project/linux-aspeed/patch/20260423192045.5729-1-root@LAPTOP-97G9G880.localdomain/mbox/","series":[{"id":501271,"url":"http://patchwork.ozlabs.org/api/series/501271/?format=json","web_url":"http://patchwork.ozlabs.org/project/linux-aspeed/list/?series=501271","date":"2026-04-23T19:20:45","name":"soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read","version":1,"mbox":"http://patchwork.ozlabs.org/series/501271/mbox/"}],"comments":"http://patchwork.ozlabs.org/api/patches/2227585/comments/","check":"pending","checks":"http://patchwork.ozlabs.org/api/patches/2227585/checks/","tags":{},"related":[],"headers":{"Return-Path":"\n <linux-aspeed+bounces-3953-incoming=patchwork.ozlabs.org@lists.ozlabs.org>","X-Original-To":["incoming@patchwork.ozlabs.org","linux-aspeed@lists.ozlabs.org"],"Delivered-To":"patchwork-incoming@legolas.ozlabs.org","Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=gmail.com header.i=@gmail.com header.a=rsa-sha256\n header.s=20251104 header.b=CJ5mWRUT;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=lists.ozlabs.org\n (client-ip=2404:9400:21b9:f100::1; helo=lists.ozlabs.org;\n envelope-from=linux-aspeed+bounces-3953-incoming=patchwork.ozlabs.org@lists.ozlabs.org;\n receiver=patchwork.ozlabs.org)","lists.ozlabs.org;\n arc=none smtp.remote-ip=\"2607:f8b0:4864:20::1034\"","lists.ozlabs.org;\n dmarc=pass (p=none dis=none) header.from=gmail.com","lists.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=gmail.com header.i=@gmail.com header.a=rsa-sha256\n header.s=20251104 header.b=CJ5mWRUT;\n\tdkim-atps=neutral","lists.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=gmail.com\n (client-ip=2607:f8b0:4864:20::1034; helo=mail-pj1-x1034.google.com;\n envelope-from=karthiproffesional@gmail.com; receiver=lists.ozlabs.org)"],"Received":["from lists.ozlabs.org (lists.ozlabs.org\n [IPv6:2404:9400:21b9:f100::1])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4g1vp34zzGz1yDD\n\tfor <incoming@patchwork.ozlabs.org>; Fri, 24 Apr 2026 11:02:51 +1000 (AEST)","from boromir.ozlabs.org (localhost [127.0.0.1])\n\tby lists.ozlabs.org (Postfix) with ESMTP id 4g1vny06pBz2ydQ;\n\tFri, 24 Apr 2026 11:02:46 +1000 (AEST)","from mail-pj1-x1034.google.com (mail-pj1-x1034.google.com\n [IPv6:2607:f8b0:4864:20::1034])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature RSA-PSS (2048 bits) server-digest\n SHA256)\n\t(No client certificate requested)\n\tby lists.ozlabs.org (Postfix) with ESMTPS id 4g1mCy4PQrz2yFm\n\tfor <linux-aspeed@lists.ozlabs.org>; Fri, 24 Apr 2026 05:21:17 +1000 (AEST)","by mail-pj1-x1034.google.com with SMTP id\n 98e67ed59e1d1-35d99031e4eso4979501a91.1\n        for <linux-aspeed@lists.ozlabs.org>;\n Thu, 23 Apr 2026 12:21:17 -0700 (PDT)","from LAPTOP-97G9G880.bbrouter ([106.51.151.135])\n        by smtp.gmail.com with ESMTPSA id\n 98e67ed59e1d1-36141898ebasm21101867a91.7.2026.04.23.12.21.12\n        (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);\n        Thu, 23 Apr 2026 12:21:15 -0700 (PDT)"],"ARC-Seal":"i=1; a=rsa-sha256; d=lists.ozlabs.org; s=201707; t=1776972079;\n\tcv=none;\n b=f8tRqFtYNrXgf/6HMm4iStbPcm2qUZ1z71pG4yE5XL3EbTP8oe9M+AGodV0U/l5nu5sIuCLgfyYnYg+EcAUw5gH/xXrOTcSVfJvgFJ+KUwxyAK8fE6bn9LMSukQVmLVHttKGb6SsxzuYOeyRCNJKJbq99F4bPu4y3m9ehfuhLBx2b7ecluXSHnRMEQQ9mFVvgolkz+REran75zzMWxyGywBQ+bgNCnMqw5QNUCSSv7OKBatskfa+H2Err6MhSarh1DFJVGP2Y14Qjl8mRi+/3S4ImwMGzNs/N5gAa52T5eF9la1D0I2N20hpElMIpbeYv69J7ppO2boErKQFwqdtNA==","ARC-Message-Signature":"i=1; a=rsa-sha256; d=lists.ozlabs.org; s=201707;\n\tt=1776972079; c=relaxed/relaxed;\n\tbh=FD+mnSjT2GzzjnT7c/+m0+ys37kefIgr9Jgnl09Emew=;\n\th=From:To:Cc:Subject:Date:Message-ID:MIME-Version;\n b=VxVwvLIiz9QhAXVQWU5w9+VmUSN2D3Y0Qyxi8PbOgJEE5RcB34CA2D+zEoBQK4+t5DofwFl544Y2GTC0tGKURVD62/us+DCuZtu3UlXFrJcRhI7inx5MwzgTKliUyWNb2tAYhuLPY12k0sZRg+elGsbijFrSpgL7fMOnUCeRmFqaTqmokkbkuPKxk3Bf1U0mlWedYZdJj5YgyZ4lY3ONY7/IaxiCkeb4oXhE0Z0C0q1tt6Wvtsl+FKrtnlUdGz88IDojWRnfp2goT0mkC4Uf2fW28TZtXy6wac2i7J3lqDG+aDLsE1juSJxSKNFTMNlMbDyJ7y/N/h4yl8hbEYfM0w==","ARC-Authentication-Results":"i=1; lists.ozlabs.org;\n dmarc=pass (p=none dis=none) header.from=gmail.com; dkim=pass (2048-bit key;\n unprotected) header.d=gmail.com header.i=@gmail.com header.a=rsa-sha256\n header.s=20251104 header.b=CJ5mWRUT; dkim-atps=neutral;\n spf=pass (client-ip=2607:f8b0:4864:20::1034; helo=mail-pj1-x1034.google.com;\n envelope-from=karthiproffesional@gmail.com;\n receiver=lists.ozlabs.org) smtp.mailfrom=gmail.com","DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n        d=gmail.com; s=20251104; t=1776972076; x=1777576876;\n darn=lists.ozlabs.org;\n        h=content-transfer-encoding:mime-version:message-id:date:subject:cc\n         :to:from:from:to:cc:subject:date:message-id:reply-to;\n        bh=FD+mnSjT2GzzjnT7c/+m0+ys37kefIgr9Jgnl09Emew=;\n        b=CJ5mWRUTSTe0vaN2tnq5y4c6xnD0frWE0N20yU8JVSYc3lFcI+mHOs4WSA1ZaStr3H\n         1FHIj2jj2rT19JSq6hxOH3e13YQdJu+KRY8pJCmLBKpKqpyiXM/BBot9nXzdvMXvehLi\n         FPSRp4H4Usa8jTa/4+qGRf3d9yViiRt17kHw9R8rQDcxqh8Wii1llQBq5rcmPA8Q0c8N\n         2Mzw48NuXQDh19eMWRmLhKoHwulqqy9iHx5vRwtRtZJw1WsWM3zdG/Olx/gzMCnKd2la\n         55XTDh4cEXgokySd2uRmMCxa1QAELvtVVynjgAm9Q3tpthmmfaNHp+KLHpM3cWZi4apK\n         DWvw==","X-Google-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n        d=1e100.net; s=20251104; t=1776972076; x=1777576876;\n        h=content-transfer-encoding:mime-version:message-id:date:subject:cc\n         :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date\n         :message-id:reply-to;\n        bh=FD+mnSjT2GzzjnT7c/+m0+ys37kefIgr9Jgnl09Emew=;\n        b=QSK0tPk98vVz0B8N8GB2CEgpLDYSB69fZAHN//IOGsOQLsoeeNiciaXNsUzsglrTwB\n         VdN7B1a80tovqxiXsvmAR9xALizRMdDKjXnlWYg1xJVfN9HgHzNpJVso8Eu9ykH3wrlh\n         IHXqvbviIDGM0HLnwH9vFHTMlWVZThSwPThbJnbImjlvBQ3K0ncri+pTZd5yn/SSlkzJ\n         L5MhvDL/y4mBtOHKAM6SCiL+a6vZ4v63DFy9pGhtT93D2F/yi5M9bhyD5ABIlfxFwQc0\n         rTB4BTy/A9m8q5UrByJpR8cLEMyfFOR1vuo536xNEzBOmg17vn7qclCSrysJD2+9HU9u\n         zpDA==","X-Forwarded-Encrypted":"i=1;\n AFNElJ/YyuoRU7KVD/fv83MBBBMboyoa6a+s6YOHjzuHQ5KKDTRZoHwtQ9zCZMuIJHqBayV5hXXosYtbjRW+AVo=@lists.ozlabs.org","X-Gm-Message-State":"AOJu0YxxBYELSFGcUyRzH1YN6DbLEbj8DpWi1yWk9sAatS4x5i07yKX0\n\t6TFT6bRyfj+6n3Ao3kXHT96y6/SHZCwixRRTjEzCJ9mdlPeYYmL1zw1b","X-Gm-Gg":"AeBDiesLd7vDWdA2U/4mai/LXu4aO2mzwaPUujP5qa7FN7D7RH/iaaJDOyAk6jvo4rr\n\tJcFroz5jmI1G9MJlP7qInYrFlJcWkIG5ygv6lr0pMJSE4lcdi7ydB2ld8mINJTnhvWJapQ8EJC3\n\tF3MjD7km/5VoU7IcCkgBniAomJLgcmsqoDPOdAEXRoVWAEGFCLpJNIAaIZ+tzZb6PXJhCArsS/f\n\tB4b6BkrCLIR7+AsTrpbCPkgWmfsQmzcJllu+cqACvX/h8gEiRj981vyv4cn93ykCJrD+uE0n5kO\n\tuvvlNjWaoEnQTf71X6tWBba2+k0JObd57Fsy5kCVs8suUIafAOne3NjsYUdhDRJ1oFFqHmMjoaB\n\tng72RIOTq79NfaE/KLjnJ1qh4N4CNBXfHIquC3unMPd50fePyhnyXAo7bRadW9jLNSNk2Z/ItIK\n\teromdrzn4cZ9TyofCE5pqhdf5SS+dk9Mp+VkOu2SMMT9jF3KRmbtW18UwsD260XCwDXKNJXulEG\n\t/+obw==","X-Received":"by 2002:a17:90b:2892:b0:35e:5ae3:2993 with SMTP id\n 98e67ed59e1d1-36140462ae6mr27327818a91.15.1776972075908;\n        Thu, 23 Apr 2026 12:21:15 -0700 (PDT)","From":"root <karthiproffesional@gmail.com>","X-Google-Original-From":"root <root@LAPTOP-97G9G880.localdomain>","To":"joel@jms.id.au,\n\tandrew@codeconstruct.com.au","Cc":"jdelvare@suse.de,\n\tlinux-aspeed@lists.ozlabs.org,\n\tlinux-kernel@vger.kernel.org,\n\tKarthikeyan KS <karthiproffesional@gmail.com>,\n\tstable@vger.kernel.org","Subject":"[PATCH] soc: aspeed: lpc-snoop: Fix usercopy overflow in\n snoop_file_read","Date":"Thu, 23 Apr 2026 19:20:45 +0000","Message-ID":"<20260423192045.5729-1-root@LAPTOP-97G9G880.localdomain>","X-Mailer":"git-send-email 2.43.0","X-Mailing-List":"linux-aspeed@lists.ozlabs.org","List-Id":"<linux-aspeed.lists.ozlabs.org>","List-Help":"<mailto:linux-aspeed+help@lists.ozlabs.org>","List-Owner":"<mailto:linux-aspeed+owner@lists.ozlabs.org>","List-Post":"<mailto:linux-aspeed@lists.ozlabs.org>","List-Archive":"<https://lore.kernel.org/linux-aspeed/>,\n  <https://lists.ozlabs.org/pipermail/linux-aspeed/>","List-Subscribe":"<mailto:linux-aspeed+subscribe@lists.ozlabs.org>,\n  <mailto:linux-aspeed+subscribe-digest@lists.ozlabs.org>,\n  <mailto:linux-aspeed+subscribe-nomail@lists.ozlabs.org>","List-Unsubscribe":"<mailto:linux-aspeed+unsubscribe@lists.ozlabs.org>","Precedence":"list","MIME-Version":"1.0","Content-Transfer-Encoding":"8bit","X-Spam-Status":"No, score=-0.2 required=5.0 tests=DKIM_SIGNED,DKIM_VALID,\n\tDKIM_VALID_AU,DKIM_VALID_EF,FREEMAIL_FROM,RCVD_IN_DNSWL_NONE,\n\tSPF_HELO_NONE,SPF_PASS autolearn=disabled version=4.0.1","X-Spam-Checker-Version":"SpamAssassin 4.0.1 (2024-03-25) on lists.ozlabs.org"},"content":"From: Karthikeyan KS <karthiproffesional@gmail.com>\n\nsnoop_file_read() passes the userspace count directly to\nkfifo_to_user() without clamping. The kfifo backing buffer is\n2048 bytes (SNOOP_FIFO_SIZE), allocated from kmalloc-2k slab.\nA read larger than 2048 bytes triggers a BUG under\nCONFIG_HARDENED_USERCOPY:\n\n  kernel BUG at mm/usercopy.c:99!\n\nReproducer:\n  hexdump /dev/aspeed-lpc-snoop0\n\nFix by clamping count to SNOOP_FIFO_SIZE before the copy.\n\nFixes: 3772e5da4454 (\"drivers/misc: Aspeed LPC snoop output using misc chardev\")\nCc: stable@vger.kernel.org\nSigned-off-by: Karthikeyan KS <karthiproffesional@gmail.com>\n---\n drivers/soc/aspeed/aspeed-lpc-snoop.c | 1 +\n 1 file changed, 1 insertion(+)","diff":"diff --git a/drivers/soc/aspeed/aspeed-lpc-snoop.c b/drivers/soc/aspeed/aspeed-lpc-snoop.c\nindex b03310c0830d..5b59e826cc68 100644\n--- a/drivers/soc/aspeed/aspeed-lpc-snoop.c\n+++ b/drivers/soc/aspeed/aspeed-lpc-snoop.c\n@@ -125,6 +125,7 @@ static ssize_t snoop_file_read(struct file *file, char __user *buffer,\n        if (ret == -ERESTARTSYS)\n            return -EINTR;\n    }\n+   count = min(count, (size_t)SNOOP_FIFO_SIZE);\n    ret = kfifo_to_user(&chan->fifo, buffer, count, &copied);\n    if (ret)\n        return ret;\n","prefixes":[]}