[Midnightbsd-cvs] [MidnightBSD/src] 7567a1: ktls: reject shared mbufs on receive decrypt

[Lucas Holt]

  Branch: refs/heads/stable/4.0
  Home:   https://github.com/MidnightBSD/src
  Commit: 7567a15c5d739e9b69b722c22e33c0f5e5c24050
      https://github.com/MidnightBSD/src/commit/7567a15c5d739e9b69b722c22e33c0f5e5c24050
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-06-10 (Wed, 10 Jun 2026)

  Changed paths:
    M sys/kern/uipc_ktls.c
    M tests/sys/kern/ktls_test.c

  Log Message:
  -----------
  ktls: reject shared mbufs on receive decrypt

Avoid decrypting KTLS receive records in place when the detached record contains non-anonymous M_EXTPG pages or sendfile EXT_SFBUF mbufs.  Those buffers may reference file-backed memory and must not be modified by the receive path.

CVE-2026-45257

AI-Assisted-by: OpenAI Codex
Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications