From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-dy1-f172.google.com (mail-dy1-f172.google.com [74.125.82.172]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 837E63AB5CA for ; Thu, 8 Oct 2026 19:20:52 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=74.125.82.172 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1791487253; cv=none; b=lQhvu+lmsVcjs3B0r163f7mBLUnZAtcVIeFxIhwCi9v27XZZsWXgeliKSSkrTR2O3svx2zgXoCAKZ69p8/0CBsPRVDtX8LKBxR4l2miVhcoKM994qOrqm9SYMkMUHUvuCe9MLV1zecOwgNrObfokzrrl+qe5h5PwEEOCIUwH5zA= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1791487253; c=relaxed/simple; bh=IVuC9lIbYtCumDz9NXJI6wI15tp2jdUI7u+AEMRRHNY=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=mMKTA+9+PEV2xWzW33KkFmR7ti02DuGhYDVD77HEK0osYzSUagY0eUrxRexKvseg4EWt8q0oOZDuwwgukSfF9rL705MQJiw1G2qUvzm3wWD9qL7Soa82/+zjrR7j/b7y+8+qvtmzu0mwPflMa2xKHmEByUDla2cOwAZCoxoJZ5U= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=trailofbits.com; spf=pass smtp.mailfrom=trailofbits.com; dkim=pass (2048-bit key) header.d=trailofbits.com header.i=@trailofbits.com header.b=LGRmq+YA; arc=none smtp.client-ip=74.125.82.172 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=trailofbits.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=trailofbits.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=trailofbits.com header.i=@trailofbits.com header.b="LGRmq+YA" Received: by mail-dy1-f172.google.com with SMTP id 5a478bee46e88-34c4a0868b6so5191505eec.0 for ; Thu, 08 Oct 2026 12:20:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=trailofbits.com; s=google; t=1791487252; x=1792092052; darn=vger.kernel.org; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to:content-type; bh=dn0FkaOSqhp1JsE8t2flY8RphMMxPkCr1WEYWQMbOsE=; b=LGRmq+YApwl2UXrqhLGOmR+OZs2818jbVdpm2qWKdLmY2PCBN/415+ynLD+aNLfxB8 vxY4h+ufC1saJ5LZUPZtUhUxcKxWm8PigdS1uMhjITIsTWTzU6b7XZhDfLZ0JIPmhwyO dZFFhA5vozk9xMMgvOOzqBeQgCOpntXvrLmzv7NVp4hGGIAWY669bUWkHY2jGrj62EP4 7UKwz/wc8HzszvvsNsC+VbZe7Kzjci7h3thzQHl06eEm7fx8+Xe4/zBLtxnBYYyhVhro +AzC+j7ibLb0JCETL0YA/42ekxWNz2FN3T+RSCHKps/+w8uHNk+/MuWaIUKa3yDd5If6 KEkQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1791487252; x=1792092052; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=dn0FkaOSqhp1JsE8t2flY8RphMMxPkCr1WEYWQMbOsE=; b=SVGwJ/2zOYGI3pz0ayLRaEk27wnKT7GgH+d5EjiaM+dztIpsBrjiWnZxhcMiQlq8Mj UTwmNDQ5ovVZ9Vthz3aPigBqDpfsjV8W9j8Br60lIPWwdoylVfyPHEzREpt4r0bh7Lwo G1bwIwUCoetlsX3qiNKI3Ix8s/pYDZrqHTwrqryQh44RPtNoDPB6/zYRuVQd9J0AVZ/8 zitltnxAlfjYrEKh9MbyFBcOMyTIHnycB+Z7lTRgkPtgYPTabg92qxPjjrIpAW28tS6y RBMRviCLvIFbIR6VU8PmC9sKsyByv/EKWw0OLo4bzxxFpNVCXDVHNMP8gSiS2vs4KoIG D6fQ== X-Forwarded-Encrypted: i=1; AKwUvBz4LJAGoTJXxl8p5fK3TQERjy7W0Jlp7u1C5pKJIkgGV2/qs1w8NIRXYjFkV/4M4oPULG63brESUQWV+I4=@vger.kernel.org X-Gm-Message-State: AFuF++lE2hFY0SXFqgymZfrUgXHFNS+aejOa2nPny7AMkV3q4xrq3aha KdwNKJw2emBzXzn0jF4tLTAyRluG2WK2FXP/tbY2fjJbPK5/pladkNizP58ygy3Cvzg= X-Gm-Gg: AYBFou3Vd7TQ/HnnkGx6ds7PtebA/ldusfdIQhs5NqEJWOzo1xFH4rIkK5nHKBghA49 ZHNV6+VmsAnK6003L8lNvwwX2qq+y2J9AZ6ZSpyB1C+r+EWX6CBbikU2z7QFmlSNpsqKpINcbpu XZyjzAzI9pbNRiG15majV3n/GEP9pWFd3Y3z1HRDhBKT8ZsizHfR6D7HPnfxLdJGw9CHxZ8u7AO CdE0NVZoz+748N5ZRgigNZKVrNSRnUv7T6uBttuEJRxWDVYl3D2zRlokeUfskOw6T79nJVdvF1H POZvTF0yyJ0y9QcUlyrBCJ1tnnZrZanA2ltb3VNYS+NaHW9G2CHn76nvESnpkpIEWrRR3xGIx/I 8AD72DSSa/a3zy4pWri/X7UJvOAPi7GfduIAKfCziofAS4zA88D6/igvpRwUk0OGwOrCgQE6tI9 hhqBNObpl++TVEfDj2SK4QcjnGGDX4WZuirwLsmcLTmm1RilgmvACX5fhO7FGWH2nhaTWe1JqK4 KZtgOmMDuvkb57uDEsODBc7KIFEfcRZI1Wq7KOm4mV1khAIA0WexfOKNU/hF2Jhd2pnTts= X-Received: by 2002:a05:7300:ec8a:b0:351:2200:1cde with SMTP id 5a478bee46e88-3536c4bee0emr284571eec.8.1791487251418; Thu, 08 Oct 2026 12:20:51 -0700 (PDT) Received: from localhost.localdomain ([2603:8001:5f01:8bab:bc88:5ec1:4f8a:5b23]) by smtp.gmail.com with ESMTPSA id 5a478bee46e88-3537ca329d9sm104325eec.5.2026.10.08.12.20.50 (version=TLS1_3 cipher=TLS_CHACHA20_POLY1305_SHA256 bits=256/256); Thu, 08 Oct 2026 12:20:50 -0700 (PDT) From: Artem Dinaburg To: stable@vger.kernel.org Cc: Artem Dinaburg , Greg Kroah-Hartman , Sasha Levin , Max Kellermann , Zhang Yi , Jan Kara , Theodore Ts'o , Jan Kara , linux-ext4@vger.kernel.org, linux-kernel@vger.kernel.org Subject: [PATCH 6.6.y 0/2] jbd2: backport CVE-2026-89566, CVE-2026-89567 Date: Thu, 8 Oct 2026 15:20:44 -0400 Message-ID: <20261008192048.98833-1-artem@trailofbits.com> X-Mailer: git-send-email 2.55.0 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Hi Greg, Sasha, and maintainers, I'm working through the smaller CVE backports still missing from 6.6.y. These 2 upstream changes belong together for CVE-2026-89566, CVE-2026-89567. They must be applied in this order because the later change depends on or completes the earlier one. The complete series is already present in 6.12.y, 6.18.y, and 7.2.y. These fixes also affect 6.1.y, which will need a separate backport; this series is only for 6.6.y. Could you please consider this series for 6.6.y? Thanks, Artem Dinaburg Series: 1. jbd2: check need_resched() when skipping busy checkpoint buffers 2. jbd2: bound shrinker scans by examined checkpoint buffers base: v6.6.157 (79643295eba17affbd16ca97f3ef04c90266b28c) plus stable-queue revision 958ddf240a33ef26b1771be944f0ea6c3b597472