Re: [BUG] drivers/misc: out-of-bounds in qp_memcpy_to_queue_iter()

[Greg Kroah-Hartman <gregkh@linuxfoundation.org>]

On Thu, Aug 27, 2026 at 12:42:26PM +0000, co wrote:
> We found a bug reachable in:
> 
>     path    drivers/misc/vmw_vmci
>     crash   out-of-bounds in qp_memcpy_to_queue_iter()
>     commit  bd5f485f3f02 ("Merge tag 'soc-arm-7.3' of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc")
> 
> Config, environment, the sanitizer report and a C reproducer follow.
> 
> == Notes ===============================================================
>     If you patch the bug based on our artifacts, a tag would be
>     appreciated:
> 
> Reported-by: co+9d44b184bc8f410d@bugs.sh
> 
>     Everything in this mail is validated by the reproducer below.
> 
>     We also hold an LLM-generated root-cause analysis and a candidate
>     patch. The patch passes an A/B test: the same reproducer panics the
>     unpatched kernel and runs clean on the patched one. Neither has had
>     human review, so both still require validation before you send or
>     apply them. Available on:
> 
>         patch.diff  https://bugs.sh/b/9d44b184bc8f410d/patch.diff
>         report.md   https://bugs.sh/b/9d44b184bc8f410d/report.md

Same here, please do not just send us random links, but rather patches
that you have verified work.

greg k-h