Ashish Kalra 9edf20e5a1 ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init() ... [ Upstream commit 43d2748394 ] Change num_ghes from int to unsigned int, preventing an overflow and causing subsequent vmalloc() to fail. The overflow happens in ghes_estatus_pool_init() when calculating len during execution of the statement below as both multiplication operands here are signed int: len += (num_ghes * GHES_ESOURCE_PREALLOC_MAX_SIZE); The following call trace is observed because of this bug: [ 9.317108] swapper/0: vmalloc error: size 18446744071562596352, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 9.317131] Call Trace: [ 9.317134] <TASK> [ 9.317137] dump_stack_lvl+0x49/0x5f [ 9.317145] dump_stack+0x10/0x12 [ 9.317146] warn_alloc.cold+0x7b/0xdf [ 9.317150] ? __device_attach+0x16a/0x1b0 [ 9.317155] __vmalloc_node_range+0x702/0x740 [ 9.317160] ? device_add+0x17f/0x920 [ 9.317164] ? dev_set_name+0x53/0x70 [ 9.317166] ? platform_device_add+0xf9/0x240 [ 9.317168] __vmalloc_node+0x49/0x50 [ 9.317170] ? ghes_estatus_pool_init+0x43/0xa0 [ 9.317176] vmalloc+0x21/0x30 [ 9.317177] ghes_estatus_pool_init+0x43/0xa0 [ 9.317179] acpi_hest_init+0x129/0x19c [ 9.317185] acpi_init+0x434/0x4a4 [ 9.317188] ? acpi_sleep_proc_init+0x2a/0x2a [ 9.317190] do_one_initcall+0x48/0x200 [ 9.317195] kernel_init_freeable+0x221/0x284 [ 9.317200] ? rest_init+0xe0/0xe0 [ 9.317204] kernel_init+0x1a/0x130 [ 9.317205] ret_from_fork+0x22/0x30 [ 9.317208] </TASK> Signed-off-by: Ashish Kalra <ashish.kalra@amd.com> [ rjw: Subject and changelog edits ] Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2022-11-10 18:14:22 +01:00
..
acpi	ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init()	2022-11-10 18:14:22 +01:00
asm-generic	asm-generic: sections: refactor memory_intersects	2022-08-31 17:15:22 +02:00
clocksource
crypto	crypto: drbg - make reseeding from get_random_bytes() synchronous	2022-06-06 08:42:42 +02:00
drm	drm: fix EDID struct for old ARM OABI format	2022-06-09 10:20:59 +02:00
dt-bindings
keys
kunit
kvm
linux	serial: 8250: Let drivers request full 16550A feature probing	2022-11-10 18:14:14 +01:00
math-emu
media	media: v4l2: Fix v4l2_i2c_subdev_set_name function documentation	2022-11-03 23:57:51 +09:00
memory	memory: renesas-rpc-if: Fix HF/OSPI data transfer in Manual Mode	2022-05-09 09:05:02 +02:00
misc
net	udp: Update reuse->has_conns under reuseport_lock.	2022-10-30 09:41:19 +01:00
pcmcia
ras
rdma
scsi	scsi: stex: Properly zero out the passthrough command structure	2022-10-15 07:55:55 +02:00
soc
sound	ALSA: control: Use deferred fasync helper	2022-08-25 11:38:21 +02:00
target
trace	tracing: Use a struct alignof to determine trace event field alignment	2022-08-21 15:16:23 +02:00
uapi	media: videodev2.h: V4L2_DV_BT_BLANKING_HEIGHT should check 'interlaced'	2022-11-03 23:57:53 +09:00
vdso
video	video: of_display_timing.h: include errno.h	2022-07-12 16:32:19 +02:00
xen	xen/gnttab: fix gnttab_end_foreign_access() without page specified	2022-03-11 12:11:54 +01:00