Re: [PATCH stable/linux-5.10.y 0/7] Backport Fix incorrect overlayfs mmap() and mprotect() LSM access controls

On Tue, Jun 30, 2026 at 5:06 AM Cai Xinchen [off-list ref] wrote:

Thank you for your reply. Regarding the two points of feedback:

First, 6.1 is still in the process of being adapted.

So do not propose for 5.10 please.

Second, this patch set is primarily intended to fix CVE-2026-46054, but
it seems that for lower versions to implement SELinux checks for overlay
mmap/mprotect checks, some dependencies are unavoidable. In such cases,
should we add more tests to reduce the risk and integrate the changes,
or should we simply not fix this issue? If more tests are needed, are
there any recommended test suites?

I have concerns.
The burdn of proof is on you.

Thanks,
Amir.