Commit 6a0b3fb48d48 for kernel

commit 6a0b3fb48d485754661dd648a0cf9533cfcfa3e5
Merge: c874ace034a9 7812d6dab069
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Sun Sep 13 09:16:36 2026 -0700

    Merge tag 'bootconfig-fixes-v7.3-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace

    Pull bootconfig fixes from Masami Hiramatsu:
     "Fix integer overflow and truncation in size checks.

       - Fix size check bypasses caused by integer overflow and truncation
         when parsing initrd or standalone bootconfig files, preventing
         buffer overflow and out-of-bounds writes in the userspace tool.

       - Fix pointer arithmetic wrap-around in get_boot_config_from_initrd()
         when handling crafted huge size values, preventing fatal kernel
         page faults during early boot"

    * tag 'bootconfig-fixes-v7.3-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace:
      bootconfig: Fix integer overflow in initrd size check
      tools/bootconfig: Fix integer overflow and truncation in size checks