From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mx0b-00069f02.pphosted.com (mx0b-00069f02.pphosted.com [205.220.177.32]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 45EC633F5B2 for ; Tue, 24 Mar 2026 07:42:33 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=fail smtp.client-ip=205.220.177.32 ARC-Seal:i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1774338163; cv=fail; b=lApC2oqImYvBhqiJbdYL+j4UulWp0qM28AEavnFUw65xvhu116ty8XKEE55au3WuoPn8M5WVJ9FmYuWJSr9TJt8kAPVTLH2KNM5sCEuXYJN3nFWWtyDv1gYn/3f8BhTL4T1zxu8kZ5uJ8D70bIzDOjh8++imCMzCmDIcYjhORXE= ARC-Message-Signature:i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1774338163; c=relaxed/simple; bh=O56QoZbOgVYMHDfkM4h89baqUV3CgEFcmTiSzDGfk5c=; h=From:To:CC:Subject:Date:Message-ID:In-Reply-To:Content-Type: MIME-Version; b=nU2h+sjEml4XNXwhSpOLuD3mhcNS49Tquhr/lSAQe0qAwF6dBn+PkazFlmTmjzfuEqjx/QFMz1qfAFiDy2BdWjjRwgmsQS3RVd5lGhnOr+QWnOpCpXIZ3xC/RQLSp2lmJQD/oBJAnyGX7EYQMkzkIGEtovHovYojUCsY8ruV5Lw= ARC-Authentication-Results:i=2; smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=oracle.com; spf=pass smtp.mailfrom=oracle.com; dkim=pass (2048-bit key) header.d=oracle.com header.i=@oracle.com header.b=Xar7FmeI; dkim=pass (1024-bit key) header.d=oracle.onmicrosoft.com header.i=@oracle.onmicrosoft.com header.b=POFqOMDH; arc=fail smtp.client-ip=205.220.177.32 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=oracle.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=oracle.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=oracle.com header.i=@oracle.com header.b="Xar7FmeI"; dkim=pass (1024-bit key) header.d=oracle.onmicrosoft.com header.i=@oracle.onmicrosoft.com header.b="POFqOMDH" Received: from pps.filterd (m0333520.ppops.net [127.0.0.1]) by mx0b-00069f02.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 62NKu40j1214643; Tue, 24 Mar 2026 07:42:30 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oracle.com; h=cc :content-type:date:from:in-reply-to:message-id:mime-version :subject:to; s=corp-2025-04-25; bh=Lrf6TtgAyP1Y2kWovtTF5jeEWpnvg WqeJATq8f0017o=; b=Xar7FmeIK5IwB9pErutHVxjtrkAI2AZoGxgEDbIVKFp+A BGGPihTMucPaxT3MQSxUtwmFke+AWki89/Or045zYKy7jU4/f2KqzjfPEFxEosco 4TpUxWgoMBVqyUCxTe7W47q6sWjuXiiWNsxXlRGpP4IExg36uQ9yz6aAQBziE/3D DN5/0ludrSZgQZ/V2/RTaA0UFgvtBGzYNpsUZiBcv8l3xUx2YBABt3AhuumxIvLT N8A12HFh2nAGvGig4gcp+VXqGHxcJE2AKYLdQ9PGLkuFwQyyqSUpsybGqHYGvxyv wf5SCU/xVEynJn7L7YOXveh0St0CfpOrN6svUFBGw== Received: from phxpaimrmta02.imrmtpd1.prodappphxaev1.oraclevcn.com (phxpaimrmta02.appoci.oracle.com [147.154.114.232]) by mx0b-00069f02.pphosted.com (PPS) with ESMTPS id 4d1khvustk-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Tue, 24 Mar 2026 07:42:29 +0000 (GMT) Received: from pps.filterd (phxpaimrmta02.imrmtpd1.prodappphxaev1.oraclevcn.com [127.0.0.1]) by phxpaimrmta02.imrmtpd1.prodappphxaev1.oraclevcn.com (8.18.1.2/8.18.1.2) with ESMTP id 62O6qMaE000739; Tue, 24 Mar 2026 07:42:28 GMT Received: from cy7pr03cu001.outbound.protection.outlook.com (mail-westcentralusazon11010015.outbound.protection.outlook.com [40.93.198.15]) by phxpaimrmta02.imrmtpd1.prodappphxaev1.oraclevcn.com (PPS) with ESMTPS id 4d1hs9jua9-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Tue, 24 Mar 2026 07:42:28 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=U+HhtOQQADEXeVpdW6uvHvdB72MRzJKJhFcKtVoFi54WTvesSafCKJGvB0aUqtv9xgCstqsc2dTEEbmONnmS+/Go3HIV5mC0kIghQrsOjNDRPBTNCgk3ZAQbkPCuqadWv2S2TUdeXTokYheYF5JP0OLFZyBJaq3q4QHFrBhzt5fQTTsBOwFMYyeFHP+VWBWCIqh5J0dorfWh9ubFrRPuG9ZshgUZxio0D6+SKzOLzOYJlQoyVI0xDX6oEieBWxt1mTDMixRQbOuTpE9TfFwi9FxllQZ6nad5BeVQrYj10Xgk144HeWnhc29/807HUF0FHCBSwZha2iWU8Sd360uuVQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=Lrf6TtgAyP1Y2kWovtTF5jeEWpnvgWqeJATq8f0017o=; b=Syp2JQNyUmeDe4I26LiDkN+DbWX21RJ3/8eO947iYrP4ytEWiTTS/fgoZdkSGqtwKocjtk9I/pQ06C9yi69P8sBCyx8wdGI1BG53UMndS8A3PbPdR+/7tDd41667P0X6fTYAj+YDq4USTvv3L+Ve7lj32U5ZgYY7HHzjZ6lop15/I2647mT/0gxHDvwumEzTIrFj4pNnIgotq8doKkNv0oDqw0UUCRPVchQhR3zrfwBYC+xskazA19tSmTBHJvySRVcatQnsJhaIgzKB2UO6uDKLjv8AzY6FUWocWfVT00FShDox4mcCoaUdChWg05abetgsDmC0PDf5eGhMd/iMoQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=oracle.com; dmarc=pass action=none header.from=oracle.com; dkim=pass header.d=oracle.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oracle.onmicrosoft.com; s=selector2-oracle-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Lrf6TtgAyP1Y2kWovtTF5jeEWpnvgWqeJATq8f0017o=; b=POFqOMDHw0mHq/Lq5DLXhZnQBiQjAEJYKvyNIOATLprzp5WBi1Ld1OjU5U+7tLOGkb5fcFgppiZXLqxSMlgBdnDyPb3vzkvd4IisQ8h5sXQGF5Gw26cz4XUXzGtKiqHM12LbBGHAx41zQ4799t2vOYFS8DX8Yo6JCXguvmGF6Zg= Received: from DM4PR10MB7505.namprd10.prod.outlook.com (2603:10b6:8:18a::7) by DM4PR10MB6255.namprd10.prod.outlook.com (2603:10b6:8:8e::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9723.31; Tue, 24 Mar 2026 07:42:24 +0000 Received: from DM4PR10MB7505.namprd10.prod.outlook.com ([fe80::f14:5389:d117:967c]) by DM4PR10MB7505.namprd10.prod.outlook.com ([fe80::f14:5389:d117:967c%7]) with mapi id 15.20.9723.030; Tue, 24 Mar 2026 07:42:23 +0000 From: Siddh Raman Pant To: "gregkh@linuxfoundation.org" CC: "cve@kernel.org" , "linux-kernel@vger.kernel.org" Subject: Re: CVE-2022-49267: mmc: core: use sysfs_emit() instead of sprintf() Thread-Topic: CVE-2022-49267: mmc: core: use sysfs_emit() instead of sprintf() Thread-Index: AQHcu2HAECZGpDEyYU6mbkyaYJzJeQ== Date: Tue, 24 Mar 2026 07:42:23 +0000 Message-ID: <9f282e5db77c382bff8e33b74a1404f7c680c2da.camel@oracle.com> In-Reply-To: <2025022629-CVE-2022-49267-b3ac@gregkh> Accept-Language: en-US, en-IN Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-ms-publictraffictype: Email x-ms-traffictypediagnostic: DM4PR10MB7505:EE_|DM4PR10MB6255:EE_ x-ms-office365-filtering-correlation-id: 9769e822-a68a-42bd-9530-08de8978e37c x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|376014|6049299003|366016|1800799024|10070799003|38070700021|4053099003|56012099003|18002099003|22082099003; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DM4PR10MB7505.namprd10.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(376014)(6049299003)(366016)(1800799024)(10070799003)(38070700021)(4053099003)(56012099003)(18002099003)(22082099003);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 2 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?blcvdTExRUw2cEZxWHdGRTV5UU5pWHcrOFpqb3RxUFB1cFhTSjFpSGZmNE5a?= =?utf-8?B?VmM5bmV4SUovVHgwUTROUGx0L2VBdkR4ZmpNYlJleDhTTXpEWmtCNHRTWkF4?= =?utf-8?B?Q0tUNkVyT2IrQkZObW9lT29ndE9TcGhxWEtmbE1ab1VvNnFRL0ZndktVaHZi?= =?utf-8?B?cm5DSktoZUFhTkRsQUx3dDk2c05rMWJmQkJDTVM1Uk45U3Q1VnUzdnJhUU1K?= =?utf-8?B?VGJIemNqTlZNcXI4L0NpYVl2RTk1cThINWlhN0xzUi9VdHMwZmFrQnAvMjRm?= =?utf-8?B?aitnMFc0VGxZNCtQNTJ3Vyt1eFVvTjUyZHV3eFZ3aWpvbVZXcVlxRDVPQ1Aw?= =?utf-8?B?cVcyQ2hxTVRUeGRmN1V3dDhrOE9FS0tNZmYxNlR6RC9hMFBaeWVKU2gwTlY4?= =?utf-8?B?T3YwRld0alp4MWtWNXhmVEVBUmhVOEljVG1hYk9hWTdpME9jT2hrejh3ZU90?= =?utf-8?B?OEpjRkp0dUJjUGEwZFhyclBxUlI5SmNJU2NvUmpzemcrb1l1R3dhM1pGYXdI?= =?utf-8?B?SmRyR2ZFNnd1YVZjYjZRbmVGNTdlb2ZuYmk0VDVpWXJ2Y0R2cnN1c1ppMC9r?= =?utf-8?B?SFAyQXNwZmJIc2JTNm94REtRdkVadk1yOEdjdXhtNVlBL0dtckNOK2t1dVpj?= =?utf-8?B?UnZWcjNSWFlISHdQTlZVVWVVdTJiZzd4L1FkV2svOEIrVmoyS2NJN09iRzFY?= =?utf-8?B?Qm1aRnlNRDNMN1FrNWlGaHBHN20zS245SUlxZzQzck0xSTNHVmZGdFNYc1Qy?= =?utf-8?B?ejVnL1htRHE5WitSVzdic0R6Uk1mSEtUT3psZ0Ftd3lrUURoOVNySUZpRHJS?= =?utf-8?B?SjhTQ01yQmZRY2JtRkpmMWl5SjVoa3FHT0JCSUYvU1h2V3lNcldNZzJta0w3?= =?utf-8?B?b0FjVUhvbkNDcUkvbmZENWRRdGdsb2hsL0ptckNnNDlPS3FYTmUzZjdvSkd5?= =?utf-8?B?MmtGbWcyN0Ztemd4TzIrQ0hpM2Q0TURrNmpvOFJUYnFHSGhFVmVoNVMxQW9Q?= =?utf-8?B?T2hLcklpRzNLeW5WM0ZpUmtNd24ybldYY1ZQME1kL205VlNUb3Y0SjRaZDI5?= =?utf-8?B?ZDcvQ3RwSmxnZHhNdVRWRmY1MTc3MVI5dDl1bnEwVWVyVHhYaFBWVGlIejBx?= =?utf-8?B?VEpGTjlUcExRSzhLNit5cTJtOHZVK1Q0M1oxb1c5eWZNbTdYd3poaGJ5WUZu?= =?utf-8?B?RjcyV3BiZ245NlZPM3FqcUpCbE05VGN4cWFWUGZxanJFSXI0K0JuS0I4UXRU?= =?utf-8?B?T0FIT0tEU1BNZXdyMVBlUWp5RFRFa09ZalpWV0NxWjNnOHpNSCtWMURMZ1Mv?= =?utf-8?B?YktJRWI5SnZQd2VQZHhBU2pRWnpneFlBZDJhM1hmbTZ3MmJianplVFkxalVE?= =?utf-8?B?bFRoL3lObjNEL3poR0h5QnlDM09RcU1naVlic1ArWnNIZ25YVXY1eU81Wmk5?= =?utf-8?B?TEp2SjQ2cjZjN1NwSTh5VmhidnFIeVMxclYzUVpKc3lDUG1saVVsR3pWOE5o?= =?utf-8?B?cE1JQkQ2YXBneGlpQ0lPUWxaVHVSSFc4TVdBaXVsL1ZCUkIzWTRncVdMRW4y?= =?utf-8?B?Ynk2OHdEYms5TFZxdDBnVlhZbXltVTJMUy9zaDBZcCtIWSs5Y2xJanJsNmJk?= =?utf-8?B?OFJHaGRIelQxT3lxZGlBQzlZQTByOWFieEVVVjBGMlgrSnhHbVhVa1U4c3Z0?= =?utf-8?B?ZFpNcmo2VEJyZzREd2tVbERmY25tOGswQkVQSkpUZ0xtYnpWOHpKSzE4aDMx?= =?utf-8?B?V2hOWWxQbFR3WTBJNHJiTGluRytoaE5DaFlhS2c3MGdYdGI0Z1FmdjFIUjIy?= =?utf-8?B?WVJkZGdVQTU5YlpGZmUwYlVPL0IwL0ZIVkJNbStEcXRWQnlQRWtXYlpUN2pW?= =?utf-8?B?dm9oNFZGeHZQSmV3WU5aSWNSQmtYbkZDM21YZGdQWk1jZkxJQW1oeUFpcjQy?= =?utf-8?B?WEw3TFdEOWZjYkE4WWNody83UmF0bHZrL0UzZExxQS9xNE5RNFdLaklhUnBu?= =?utf-8?B?aUlna1QyVFpjaVVMWGJPQXlmMUkrcjRHNktsK1hMeDBDK0RSWWoxN3BURHln?= =?utf-8?B?VEVDSi9xR01tVFd2enpSdEVtbG1vbmY4NjMwSzYwZndkQmtVdDlNakNyZFYy?= =?utf-8?B?dlMvcFRiMmhrWDVoS0UrVm9lNXpoOE5Ic001NkZBOEpsNlZXaUZDdXdpaG1Y?= =?utf-8?B?S2JReWtiRVltL25VZnRnTkJhdHVOZDVicmp2aDZNWkxDNEQ1V1hFajN0SHZs?= =?utf-8?B?OVBteCtiMHhtaUR2a0F0TFF3RkxDemZpMURjVm5rS0Z2YWFJSlpTNk16czRn?= =?utf-8?B?T1l4S28rTTVZelRaWTBrbEtWeDhTQnVMYmNvMStaSnZ4SVlkejcwSkViSGNk?= =?utf-8?Q?0TqLOtDtOHzloHaz2Lx2aj0A5MiViUC2WRxbKJnVR8W6S?= x-ms-exchange-antispam-messagedata-1: wAjx1/v5e68xhWeFC/cuSVbkdKBYZo9afMI= Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="=-zkR5rREj5sQCIgSHR8yp" Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 X-Exchange-RoutingPolicyChecked: Nr212oSBJT+PJNeoOC8Swf3NZjX5+H7CS9r3xGCB6oq1eUvDK3O5epcBT5c0B5bXYgCtraLUf62pMx/eVlE9fZKIrHl9vp/jxDHptamLcaEMKdxrh0N6JhDv/nibq5F7XmV+JHHwFDhJ/YUf1wIxEo8USKpLKwZ5lB/P1Fi/rT9VZO+pmWgcfnUQwW2J9+WO4zWyrTtXyMXEsdsHfVr637WQCMWyo1hG6NMiyhFsVuVScsJBlqlsQrjWQ6O+uH1K/ihUKM0w6xn9vREG8it+/bUVC393QeacMU7xhUf4rGrZgcvyHlRuP5BenY4kGQq31IcXsLU0z2DWAK8D2hhpnA== X-MS-Exchange-AntiSpam-ExternalHop-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-ExternalHop-MessageData-0: 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 X-OriginatorOrg: oracle.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DM4PR10MB7505.namprd10.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 9769e822-a68a-42bd-9530-08de8978e37c X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Mar 2026 07:42:23.8247 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4e2c6054-71cb-48f1-bd6c-3a9705aca71b X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: dv/KVtc4u+ZuQyKBP7O+To4UkKPK13G7K++LfrCwb905B93Ts07cua38MxfAmpXhM04WInB6311Z5dkEuqH7qBR7I03EoczCiLxpohNbIdI= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM4PR10MB6255 X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1143,Hydra:6.1.51,FMLib:17.12.100.49 definitions=2026-03-24_02,2026-03-23_02,2025-10-01_01 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 phishscore=0 bulkscore=0 mlxscore=0 suspectscore=0 spamscore=0 malwarescore=0 mlxlogscore=805 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2603050001 definitions=main-2603240061 X-Proofpoint-Spam-Details-Enc: AW1haW4tMjYwMzI0MDA2MSBTYWx0ZWRfX3ymBghA54oxf QFQNOxnyipk3QbKpfcJu9oUJ3wHoL7USUwdfpVhofRVWn6nM7Ocbq3TpsOmCC7Q3hW50YeNfZ72 KLBd8zyF1CDeeGnts+oB1MpIBz9I8vu60HywA+S4D1+2v1dyNpG/V7GKupYuqsa6xhmMWBYXgje fRJV9pqg4Jeqljt7wlYmgngBl85vnhdjbvNf0ySTjNOXrvp+jR/0ogxs2L4rLXn510WHAmRek9/ KS37DowKx9ZZ7lyuIqVXl2OlUw4IKV2fgt4I4LmHlsoOY5ZsTm+75fyjFuZAA7rltckIGEy0DhO wM8gprJVAKTp7HLHP8y2oP4dFbFK8LVeZ6uiVUrfOkum4N5VeFJtZa+V2uLeuCEZmiH8bsuw0xr 07nvkinbEe9pr9Uh3U1hISNFrSe64/BOg/aC7l2ZVlIJLRVyZsWbbMyJJj4s+LGOwRIIO+atA5i nde4iIsMnm20A4JlzAQ== X-Authority-Analysis: v=2.4 cv=VIXQXtPX c=1 sm=1 tr=0 ts=69c24066 cx=c_pps a=OOZaFjgC48PWsiFpTAqLcw==:117 a=OOZaFjgC48PWsiFpTAqLcw==:17 a=z/mQ4Ysz8XfWz/Q5cLBRGdckG28=:19 a=lCpzRmAYbLLaTzLvsPZ7Mbvzbb8=:19 a=xqWC_Br6kY4A:10 a=Yq5XynenixoA:10 a=GoEa3M9JfhUA:10 a=VkNPw1HP01LnGYTKEx00:22 a=jiCTI4zE5U7BLdzWsZGv:22 a=BqU2WV_vvsyTyxaotp0D:22 a=VwQbUJbxAAAA:8 a=HH5vDtPzAAAA:8 a=O2J-C-rfjcqyKUrDonoA:9 a=QEXdDO2ut3YA:10 a=zZCYzV9kfG8A:10 a=5Vm2rHkQtvMDLfsE4vQA:9 a=FfaGCDsud1wA:10 a=QM_-zKB-Ew0MsOlNKMB5:22 X-Proofpoint-GUID: HTqBHvTsWtzahUF-q4w20Lq6iK0Jl7rm X-Proofpoint-ORIG-GUID: HTqBHvTsWtzahUF-q4w20Lq6iK0Jl7rm --=-zkR5rREj5sQCIgSHR8yp Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Wed, 26 Feb 2025 02:57:52 +0100, Greg Kroah-Hartman wrote: > In the Linux kernel, the following vulnerability has been resolved: >=20 > mmc: core: use sysfs_emit() instead of sprintf() >=20 > sprintf() (still used in the MMC core for the sysfs output) is vulnerable > to the buffer overflow. Use the new-fangled sysfs_emit() instead. >=20 > Found by Linux Verification Center (linuxtesting.org) with the SVACE stat= ic > analysis tool. >=20 > The Linux kernel CVE team has assigned CVE-2022-49267 to this issue. What overflow does this actually fix? I think this is a defensive patch. In fact, you asked the same question earlier during stable backport which apparently got no reply: https://lore.kernel.org/all/2025121205-wool-undesired-0609@gregkh/ Thanks, Siddh --=-zkR5rREj5sQCIgSHR8yp Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEQ4+7hHLv3y1dvdaRBwq/MEwk8ioFAmnCQFcACgkQBwq/MEwk 8irK5RAAj70hVmIYpwBP/fi5KmslfX16cUdJ1jZNpMg+cUE1njcITHRH1WlQ8qFG QCz1zSl7e73wnL6JgbpfO6m74R5NzaZs3NbScNlaCS28vFyve6F4/x8PokhDiKDN MRpdpAjQkZaawM1ZKnEV61Lr503pPNi368ZrEWYmUPxV9eaumlkaYQj5+W6OlDjX GXYtHiunC/Ly6fpYHmnDdmRARkutHgeBrJphNFJKDmVEw8kMScTAS9BS+af2dp+h RRhdzw3mC/2RWj+H+mvyKfeVjpoBHkbVMzJ692YqItEPmrOCKehbvGvjXJ+YwSpd YutUZHUItAU3NLKOHm514lVllyuxY7ZYWqKuExh5Eb1ZD1rxk/59NHZGaqeNchs6 wjHO34BfqR+M9RcnEd6Qgfk+H0fw6ZR6qD/B+J2Rd0ybORBmuDnrcV5kauLy4UDR ZbMHbGWLOQ88/y+KiBqE2dVrACSZBIpNlnos6CbGmUh8vVFVLGUpl+hEz/RSXDAh YndbOBen2AodErw0+RMZDK4XVzPBxCRkOA9XJVVTjk+wI5vg2GSdGiRrhDOCML2h KuOlIY4hziNvXs9dX5UrEEiDRHDYOSZ21GltvG2YLWyOWGxhI7WMuq9C/ULPJvZV o93LHJOHpEpJtnXFi6f3doNhdR8AjOxgsCtY6zxRJFm/+FCsLjk= =Jl+j -----END PGP SIGNATURE----- --=-zkR5rREj5sQCIgSHR8yp--