Ashish Kalra 4c10c85411 ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init() ... [ Upstream commit 43d2748394 ] Change num_ghes from int to unsigned int, preventing an overflow and causing subsequent vmalloc() to fail. The overflow happens in ghes_estatus_pool_init() when calculating len during execution of the statement below as both multiplication operands here are signed int: len += (num_ghes * GHES_ESOURCE_PREALLOC_MAX_SIZE); The following call trace is observed because of this bug: [ 9.317108] swapper/0: vmalloc error: size 18446744071562596352, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 9.317131] Call Trace: [ 9.317134] <TASK> [ 9.317137] dump_stack_lvl+0x49/0x5f [ 9.317145] dump_stack+0x10/0x12 [ 9.317146] warn_alloc.cold+0x7b/0xdf [ 9.317150] ? __device_attach+0x16a/0x1b0 [ 9.317155] __vmalloc_node_range+0x702/0x740 [ 9.317160] ? device_add+0x17f/0x920 [ 9.317164] ? dev_set_name+0x53/0x70 [ 9.317166] ? platform_device_add+0xf9/0x240 [ 9.317168] __vmalloc_node+0x49/0x50 [ 9.317170] ? ghes_estatus_pool_init+0x43/0xa0 [ 9.317176] vmalloc+0x21/0x30 [ 9.317177] ghes_estatus_pool_init+0x43/0xa0 [ 9.317179] acpi_hest_init+0x129/0x19c [ 9.317185] acpi_init+0x434/0x4a4 [ 9.317188] ? acpi_sleep_proc_init+0x2a/0x2a [ 9.317190] do_one_initcall+0x48/0x200 [ 9.317195] kernel_init_freeable+0x221/0x284 [ 9.317200] ? rest_init+0xe0/0xe0 [ 9.317204] kernel_init+0x1a/0x130 [ 9.317205] ret_from_fork+0x22/0x30 [ 9.317208] </TASK> Signed-off-by: Ashish Kalra <ashish.kalra@amd.com> [ rjw: Subject and changelog edits ] Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2022-11-10 18:17:24 +01:00
..
acpi	ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init()	2022-11-10 18:17:24 +01:00
asm-generic	arm64 fixes for -rc7	2022-09-23 15:28:51 -07:00
clocksource
crypto
drm
dt-bindings	dt-bindings: clock: exynosautov9: correct clock numbering of peric0/c1	2022-10-21 12:38:32 +02:00
keys
kunit
kvm
linux	net/mlx5: Fix possible use-after-free in async command interface	2022-11-04 00:00:34 +09:00
math-emu
media	media: v4l: subdev: Fail graciously when getting try data for NULL state	2022-11-10 18:17:24 +01:00
memory
misc
net	net-memcg: avoid stalls when under memory pressure	2022-11-04 00:00:31 +09:00
pcmcia
ras
rdma
rv
scsi	scsi: stex: Properly zero out the passthrough command structure	2022-10-15 08:02:56 +02:00
soc
sound	ASoC: Intel: common: add ACPI matching tables for Raptor Lake	2022-11-04 00:00:28 +09:00
target
trace	ARM: SoC fixes for 6.0-rc6	2022-09-22 11:10:11 -07:00
uapi	media: videodev2.h: V4L2_DV_BT_BLANKING_HEIGHT should check 'interlaced'	2022-11-04 00:00:32 +09:00
ufs
vdso
video
xen