On Wed, 30 Sep 2026 14:28:52 +0300, Natasha Klaus wrote: > map_write() silently truncates uid_map/gid_map/projid_map values above > U32_MAX modulo 2^32 on 64-bit kernels, so e.g. "4294967301 1000 1" is > installed as "5 1000 1" without an error. Patch 1 parses each field > with kstrtou32() so such values fail with -EINVAL. Patch 2 adds > selftests for out-of-range and negative values in each field and for > the unchanged in-range path. > > [...]
Applied to the namespace-7.4.misc branch of the vfs/vfs.git tree. Patches in the namespace-7.4.misc branch should appear in linux-next soon. Please report any outstanding bugs that were missed during review in a new review to the original patch series allowing us to drop it. It's encouraged to provide Acked-bys and Reviewed-bys even though the patch has now been applied. If possible patch trailers will be updated. Note that commit hashes shown below are subject to change due to rebase, trailer updates or similar. If in doubt, please check the listed branch. tree: https://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs.git branch: namespace-7.4.misc [1/2] userns: reject uid_map/gid_map values that do not fit in u32 https://git.kernel.org/vfs/vfs/c/09a71b58a25d [2/2] selftests/namespaces: add uid_map/gid_map range tests https://git.kernel.org/vfs/vfs/c/8b7b7739ea6a
