Ricardo RobainaandGreg Kroah-Hartman e82735d5d3 audit: fix potential integer overflow in audit_log_n_hex() ...

[ Upstream commit 65dfde57d1 ]

The function calculates new_len as len << 1 for hex encoding. This
has two overflow risks: the shift itself can overflow when len is
large, and the result can be truncated when assigned to new_len
(declared as int) from the size_t calculation.

Fix by using check_shl_overflow() to catch shift overflow and
changing new_len and loop counter i to size_t to prevent truncation.

Cc: stable@vger.kernel.org
Fixes: 168b717395 ("AUDIT: Clean up logging of untrusted strings")
Reviewed-by: Richard Guy Briggs <rgb@redhat.com>
Signed-off-by: Ricardo Robaina <rrobaina@redhat.com>
[PM: remove vertical whitspace noise]
Signed-off-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2026-07-24 15:55:17 +02:00

..

bpf

bpf: Allow LPM map access from sleepable BPF programs

2026-07-24 15:55:16 +02:00

cgroup

cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed

2026-07-24 15:55:10 +02:00

configs

…

debug

kdb: Do not assume write() callback available

2025-02-21 13:50:09 +01:00

dma

dma: swiotlb: add KMSAN annotations to swiotlb_bounce()

2026-04-11 14:16:05 +02:00

entry

entry: Respect changes to system call number by trace_sys_enter()

2024-04-03 15:19:44 +02:00

events

x86/uprobes: Fix XOL allocation failure for 32-bit tasks

2026-03-25 11:03:19 +01:00

futex

futex: Prevent lockup in requeue-PI during signal/ timeout wakeup

2026-06-01 17:39:29 +02:00

gcov

gcov: add support for GCC 15

2025-12-07 06:12:35 +09:00

irq

genirq/irq_sim: Initialize work context pointers properly

2026-02-06 16:44:22 +01:00

kcsan

kcsan: test: Initialize dummy variable

2025-08-15 12:04:59 +02:00

livepatch

livepatch: Match old_sympos 0 and 1 in klp_find_func()

2026-01-11 15:18:40 +01:00

locking

locking/rtmutex: Skip remove_waiter() when waiter is not enqueued

2026-07-04 13:41:33 +02:00

module

module: decompress: check return value of module_extend_max_pages()

2026-07-24 15:54:29 +02:00

power

PM: sleep: console: Fix the black screen issue

2025-08-28 16:25:53 +02:00

printk

printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX

2025-02-21 13:49:30 +01:00

rcu

rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access

2026-03-25 11:03:24 +01:00

sched

sched: restore timer_slack_ns when resetting RT policy on fork

2026-07-24 15:54:38 +02:00

time

posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu()

2026-07-24 15:55:07 +02:00

trace

bitops: make BYTES_TO_BITS() treewide-available

2026-07-24 15:55:12 +02:00

.gitignore

…

acct.c

acct: block access to kernel internal filesystems

2025-03-07 16:56:39 +01:00

async.c

async: Introduce async_schedule_dev_nocall()

2024-01-31 16:17:00 -08:00

audit_fsnotify.c

…

audit_tree.c

audit: use fsnotify group lock helpers

2022-04-25 14:37:28 +02:00

audit_watch.c

audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare()

2023-11-28 17:07:08 +00:00

audit.c

audit: fix potential integer overflow in audit_log_n_hex()

2026-07-24 15:55:17 +02:00

audit.h

audit: avoid missing-prototype warnings

2026-03-04 07:19:20 -05:00

auditfilter.c

ima: Avoid blocking in RCU read-side critical section

2024-07-11 12:47:16 +02:00

auditsc.c

audit: fix incorrect inheritable capability in CAPSET records

2026-06-01 17:39:32 +02:00

backtracetest.c

treewide: Replace DECLARE_TASKLET() with DECLARE_TASKLET_OLD()

2020-07-30 11:15:58 -07:00

bounds.c

bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS

2024-05-02 16:29:32 +02:00

capability.c

xfs: don't generate selinux audit messages for capability testing

2022-03-09 10:32:06 -08:00

cfi.c

cfi: Switch to -fsanitize=kcfi

2022-09-26 10:13:13 -07:00

compat.c

sched_getaffinity: don't assume 'cpumask_size()' is fully initialized

2023-04-06 12:10:40 +02:00

configs.c

proc: convert everything to "struct proc_ops"

2020-02-04 03:05:26 +00:00

context_tracking.c

context_tracking: Fix noinstr vs KASAN

2023-03-10 09:33:45 +01:00

cpu_pm.c

context_tracking: Take IRQ eqs entrypoints over RCU

2022-07-05 13:32:59 -07:00

cpu.c

cpu: hotplug: Bound hotplug states sysfs output

2026-07-24 15:55:07 +02:00

crash_core.c

vmcoreinfo: add kallsyms_num_syms symbol

2022-08-28 14:02:44 -07:00

crash_dump.c

crash_dump: Remove no longer used saved_max_pfn

2020-04-15 11:21:54 +02:00

cred.c

cred: switch to using atomic_long_t

2023-12-20 17:00:20 +01:00

delayacct.c

delayacct: support re-entrance detection of thrashing accounting

2022-09-26 19:46:07 -07:00

dma.c

proc: introduce proc_create_single{,_data}

2018-05-16 07:23:35 +02:00

exec_domain.c

proc: introduce proc_create_single{,_data}

2018-05-16 07:23:35 +02:00

exit.c

exit: Sleep at TASK_IDLE when waiting for application core dump

2026-06-01 17:39:00 +02:00

extable.c

context_tracking: Take NMI eqs entrypoints over RCU

2022-07-05 13:32:59 -07:00

fail_function.c

kernel/fail_function: fix memory leak with using debugfs_lookup()

2023-03-11 13:55:39 +01:00

fork.c

unshare: fix nsproxy leak in ksys_unshare() on set_cred_ucounts() failure

2026-06-01 17:39:15 +02:00

freezer.c

freezer,sched: Rewrite core freezer logic

2022-09-07 21:53:50 +02:00

gen_kheaders.sh

kheaders: Ignore silly-rename files

2025-01-23 17:17:11 +01:00

groups.c

security: Add LSM hook to setgroups() syscall

2022-07-15 18:21:49 +00:00

hung_task.c

sched: Fix more TASK_state comparisons

2022-09-30 16:50:39 +02:00

iomem.c

mm/nvdimm: add is_ioremap_addr and use that to check ioremap address

2019-07-12 11:05:40 -07:00

irq_work.c

irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT

2026-06-01 17:39:39 +02:00

jump_label.c

jump_label: Fix static_key_slow_dec() yet again

2024-10-17 15:21:29 +02:00

kallsyms_internal.h

…

kallsyms.c

kallsyms/ftrace: set module buildid in ftrace_mod_address_lookup()

2026-03-04 07:19:40 -05:00

kcmp.c

Merge branch 'exec-update-lock-for-v5.11' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace

2020-12-15 19:36:48 -08:00

Kconfig.freezer

…

Kconfig.hz

…

Kconfig.locks

locking/rwlock: Provide RT variant

2021-08-17 17:50:51 +02:00

Kconfig.preempt

Revert "signal, x86: Delay calling signals in atomic on RT enabled kernels"

2022-03-31 10:36:55 +02:00

kcov.c

kcov: mark in_softirq_really() as __always_inline

2025-01-09 13:30:05 +01:00

kexec_core.c

kexec: fix a memory leak in crash_shrink_memory()

2023-07-19 16:21:08 +02:00

kexec_elf.c

kexec: initialize ELF lowest address to ULONG_MAX

2025-04-10 14:33:36 +02:00

kexec_file.c

kexec: derive purgatory entry from symbol

2026-03-04 07:20:50 -05:00

kexec_internal.h

panic, kexec: make __crash_kexec() NMI safe

2022-09-11 21:55:06 -07:00

kexec.c

kernel: kexec: copy user-array safely

2023-11-28 17:06:57 +00:00

kheaders.c

kheaders: Use array declaration instead of char

2023-05-11 23:03:02 +09:00

kmod.c

modules: add CONFIG_MODPROBE_PATH

2021-05-07 00:26:33 -07:00

kprobes.c

kprobes: Remove unneeded warnings from __arm_kprobe_ftrace()

2026-03-25 11:03:16 +01:00

ksysfs.c

kexec: turn all kexec_mutex acquisitions into trylocks

2022-09-11 21:55:06 -07:00

kthread.c

kthread: unpark only parked kthread

2024-10-17 15:22:28 +02:00

latencytop.c

latencytop: use the last element of latency_record of system

2022-09-11 21:55:12 -07:00

Makefile

kernel/numa.c: Move logging out of numa.h

2024-06-12 11:03:16 +02:00

module_signature.c

module: harden ELF info handling

2021-01-19 10:24:45 +01:00

notifier.c

notifier: Add blocking/atomic_notifier_chain_register_unique_prio()

2022-05-19 19:30:30 +02:00

nsproxy.c

Revert "fs/exec: allow to unshare a time namespace on vfork+exec"

2022-09-13 10:38:43 -07:00

numa.c

kernel/numa.c: Move logging out of numa.h

2024-06-12 11:03:16 +02:00

padata.c

padata: Put CPU offline callback in ONLINE section to allow failure

2026-06-01 17:39:10 +02:00

panic.c

panic: Flush kernel log buffer at the end

2024-04-13 13:04:54 +02:00

params.c

module: Fix freeing of charp module parameters when CONFIG_SYSFS=n

2026-06-01 17:39:06 +02:00

pid_namespace.c

pid: Replace struct pid 1-element array with flex-array

2024-08-29 17:30:18 +02:00

pid.c

pidfd: refuse access to tasks that have started exiting harder

2026-06-19 13:37:15 +02:00

profile.c

profiling: remove profile=sleep support

2024-08-14 13:52:50 +02:00

ptrace.c

ptrace: slightly saner 'get_dumpable()' logic

2026-05-15 14:49:41 +02:00

range.c

…

reboot.c

kernel/reboot: emergency_restart: Set correct system_state

2023-11-28 17:07:13 +00:00

regset.c

regset: use kvzalloc() for regset_get_alloc()

2026-06-01 17:38:44 +02:00

relay.c

relayfs: fix out-of-bounds access in relay_file_read

2023-05-11 23:03:03 +09:00

resource_kunit.c

resource: provide meaningful MODULE_LICENSE() in test suite

2020-11-25 18:52:35 +01:00

resource.c

Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()"

2026-01-11 15:18:32 +01:00

rseq.c

rseq: Protect event mask against membarrier IPI

2025-10-19 16:23:21 +02:00

scftorture.c

scftorture: Forgive memory-allocation failure if KASAN

2023-09-23 11:11:00 +02:00

scs.c

scs: fix a wrong parameter in __scs_magic

2026-01-11 15:18:54 +01:00

seccomp.c

seccomp: Fix a race with WAIT_KILLABLE_RECV if the tracer replies too fast

2025-10-15 11:56:25 +02:00

signal.c

signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()

2026-06-19 13:37:10 +02:00

smp.c

smp: Fix up and expand the smp_call_function_many() kerneldoc

2025-10-15 11:56:29 +02:00

smpboot.c

smpboot: use atomic_try_cmpxchg in cpu_wait_death and cpu_report_death

2022-09-11 21:55:10 -07:00

smpboot.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

softirq.c

softirq: Add trace points for tasklet entry/exit

2025-12-07 06:12:34 +09:00

stackleak.c

stackleak: add on/off stack variants

2022-05-08 01:33:09 -07:00

stacktrace.c

uaccess: remove CONFIG_SET_FS

2022-02-25 09:36:06 +01:00

static_call_inline.c

x86/static-call: provide a way to do very early static-call updates

2024-12-19 18:08:58 +01:00

static_call.c

static_call: Don't make __static_call_return0 static

2022-04-05 09:59:38 +02:00

stop_machine.c

Merge tag 'sched-core-2022-05-23' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

2022-05-24 11:11:13 -07:00

sys_ni.c

syscalls: fix compat_sys_io_pgetevents_time64 usage

2024-07-05 09:31:59 +02:00

sys.c

kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths

2025-10-19 16:23:14 +02:00

sysctl-test.c

kernel/sysctl-test: use SYSCTL_{ZERO/ONE_HUNDRED} instead of i_{zero/one_hundred}

2022-09-08 16:56:45 -07:00

sysctl.c

sysctl: fix uninitialized variable in proc_do_large_bitmap

2026-04-11 14:16:12 +02:00

task_work.c

task_work: Introduce task_work_cancel() again

2024-08-03 08:49:34 +02:00

taskstats.c

taskstats: set version in TGID exit notifications

2026-06-01 17:38:50 +02:00

torture.c

torture: Fix hang during kthread shutdown phase

2023-03-10 09:34:07 +01:00

tracepoint.c

tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func()

2026-06-19 13:37:21 +02:00

tsacct.c

taskstats: version 12 with thread group and exe info

2022-04-29 14:38:03 -07:00

ucount.c

ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit()

2026-03-04 07:19:42 -05:00

uid16.c

fs: add do_fchownat(), ksys_fchown() helpers and ksys_{,l}chown() wrappers

2018-04-02 20:15:59 +02:00

uid16.h

kernel: provide ksys_*() wrappers for syscalls called by kernel/uid16.c

2018-04-02 20:15:30 +02:00

umh.c

freezer,umh: Fix call_usermode_helper_exec() vs SIGKILL

2023-02-22 12:59:50 +01:00

up.c

…

user_namespace.c

Merge tag 'ucount-rlimits-cleanups-for-v5.19' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace

2022-10-09 16:24:05 -07:00

user-return-notifier.c

treewide: Add SPDX license identifier for missed files

2019-05-21 10:50:45 +02:00

user.c

fs/epoll: use a per-cpu counter for user's watches count

2021-09-08 11:50:27 -07:00

usermode_driver.c

blob_to_mnt(): kern_unmount() is needed to undo kern_mount()

2022-05-19 23:25:47 -04:00

utsname_sysctl.c

kernel/utsname_sysctl.c: Fix hostname polling

2022-10-23 12:01:01 -07:00

utsname.c

uts: Use generic ns_common::count

2020-08-19 14:13:20 +02:00

watch_queue.c

watch_queue: fix pipe accounting mismatch

2025-04-10 14:33:30 +02:00

watchdog_hld.c

watchdog/perf: properly initialize the turbo mode timestamp and rearm counter

2024-08-03 08:49:42 +02:00

watchdog.c

watchdog: move softlockup_panic back to early_param

2023-11-28 17:07:09 +00:00

workqueue_internal.h

workqueue: Assign a color to barrier work items

2021-08-17 07:49:10 -10:00

workqueue.c

workqueue: drop spurious '*' from print_worker_info() fn declaration

2026-07-24 15:54:36 +02:00