diff options
| author | Yang Xiuwei <yangxiuwei@kylinos.cn> | 2026-08-17 16:07:28 +0800 |
|---|---|---|
| committer | Martin K. Petersen (Oracle) <mkp@kernel.org> | 2026-09-02 10:36:52 -0400 |
| commit | ece06de726737e887dc0225c8283477624f8ae21 (patch) | |
| tree | 89176b123a438247f7724f1edf109d3e4f35894b /scripts/Makefile.thinlto | |
| parent | e0d26fe176a8db6ccad4ab38c5bab29391c1946b (diff) | |
| download | linux-stable-ece06de726737e887dc0225c8283477624f8ae21.tar.gz linux-stable-ece06de726737e887dc0225c8283477624f8ae21.zip | |
scsi: bsg: Cap io_uring sense copy to max_response_len
Completion copied scmd->sense_len to the user response buffer without
honoring max_response_len. After a valid sense, the midlayer sets
sense_len to the real length (up to SCSI_SENSE_BUFFERSIZE), so a smaller
user buffer was overrun.
Fixes: 7b6d3255e7f8 ("scsi: bsg: add io_uring passthrough handler")
Cc: stable@vger.kernel.org
Signed-off-by: Yang Xiuwei <yangxiuwei@kylinos.cn>
Link: https://patch.msgid.link/20260817080730.967879-2-yangxiuwei@kylinos.cn
Signed-off-by: Martin K. Petersen (Oracle) <mkp@kernel.org>
Diffstat (limited to 'scripts/Makefile.thinlto')
0 files changed, 0 insertions, 0 deletions