[v4] hw/uefi: security fixes

[PATCH v4 0/6] hw/uefi: security fixes

Gerd Hoffmann posted 6 patches 4 days, 19 hours ago

Diff against v1 v2 v3
Download series mbox

Patches applied successfully (tree, apply log)
git fetch https://github.com/patchew-project/qemu tags/patchew/20260720143244.821889-1-kraxel@redhat.com

Maintainers: Gerd Hoffmann <kraxel@redhat.com>

hw/uefi/var-service-auth.c    |  7 ++++
hw/uefi/var-service-core.c    | 14 +++++++-
hw/uefi/var-service-json.c    |  5 +++
hw/uefi/var-service-policy.c  | 68 ++++++++++++++++-------------------
hw/uefi/var-service-siglist.c |  3 ++
hw/uefi/var-service-vars.c    | 19 ++++++++++
6 files changed, 78 insertions(+), 38 deletions(-)

Expand all Fold all

[PATCH v4 0/6] hw/uefi: security fixes

Posted by Gerd Hoffmann 4 days, 19 hours ago

v4:
 - add fix for CVE-2026-16288
 - fix format string (Luigi).
v3:
 - just drop debug function instead of trying to fix it.
 - add three more CVE fixes.

Gerd Hoffmann (6):
  hw/uefi: add sanity check
  hw/uefi: remove debug function
  hw/uefi: check lower limit for signature list size
  hw/uefi: account variable policy entries against storage size
  hw/uefi: add post_load checks
  hw/uefi: make SetupMode read-only

 hw/uefi/var-service-auth.c    |  7 ++++
 hw/uefi/var-service-core.c    | 14 +++++++-
 hw/uefi/var-service-json.c    |  5 +++
 hw/uefi/var-service-policy.c  | 68 ++++++++++++++++-------------------
 hw/uefi/var-service-siglist.c |  3 ++
 hw/uefi/var-service-vars.c    | 19 ++++++++++
 6 files changed, 78 insertions(+), 38 deletions(-)

-- 
2.55.0

Re: [PATCH v4 0/6] hw/uefi: security fixes

Posted by Michael Tokarev 1 day, 1 hour ago

On 7/20/26 17:32, Gerd Hoffmann wrote:
> v4:
>   - add fix for CVE-2026-16288
>   - fix format string (Luigi).
> v3:
>   - just drop debug function instead of trying to fix it.
>   - add three more CVE fixes.
> 
> Gerd Hoffmann (6):
>    hw/uefi: add sanity check
>    hw/uefi: remove debug function
>    hw/uefi: check lower limit for signature list size
>    hw/uefi: account variable policy entries against storage size
>    hw/uefi: add post_load checks
>    hw/uefi: make SetupMode read-only
> 
>   hw/uefi/var-service-auth.c    |  7 ++++
>   hw/uefi/var-service-core.c    | 14 +++++++-
>   hw/uefi/var-service-json.c    |  5 +++
>   hw/uefi/var-service-policy.c  | 68 ++++++++++++++++-------------------
>   hw/uefi/var-service-siglist.c |  3 ++
>   hw/uefi/var-service-vars.c    | 19 ++++++++++
>   6 files changed, 78 insertions(+), 38 deletions(-)

I'm picking this patch set for the stable qemu series.
Please let me know if I shouldn't.

Thanks,

/mjt

Re: [PATCH v4 0/6] hw/uefi: security fixes

Posted by Luigi Leonardi 3 days, 1 hour ago

On Mon, Jul 20, 2026 at 04:32:36PM +0200, Gerd Hoffmann wrote:
>v4:
> - add fix for CVE-2026-16288
> - fix format string (Luigi).
>v3:
> - just drop debug function instead of trying to fix it.
> - add three more CVE fixes.
>
>Gerd Hoffmann (6):
>  hw/uefi: add sanity check
>  hw/uefi: remove debug function
>  hw/uefi: check lower limit for signature list size
>  hw/uefi: account variable policy entries against storage size
>  hw/uefi: add post_load checks
>  hw/uefi: make SetupMode read-only
>
> hw/uefi/var-service-auth.c    |  7 ++++
> hw/uefi/var-service-core.c    | 14 +++++++-
> hw/uefi/var-service-json.c    |  5 +++
> hw/uefi/var-service-policy.c  | 68 ++++++++++++++++-------------------
> hw/uefi/var-service-siglist.c |  3 ++
> hw/uefi/var-service-vars.c    | 19 ++++++++++
> 6 files changed, 78 insertions(+), 38 deletions(-)
>
>-- 
>2.55.0
>
>

Acked-by: Luigi Leonardi <leonardi@redhat.com>