linux-next

mirror of https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git synced 2025-01-10 15:58:47 +00:00

History

David Howells 94c4554ba0 KEYS: Fix race between key destruction and finding a keyring by name

There appears to be a race between:

 (1) key_gc_unused_keys() which frees key->security and then calls
     keyring_destroy() to unlink the name from the name list

 (2) find_keyring_by_name() which calls key_permission(), thus accessing
     key->security, on a key before checking to see whether the key usage is 0
     (ie. the key is dead and might be cleaned up).

Fix this by calling ->destroy() before cleaning up the core key data -
including key->security.

Reported-by: Petr Matousek <pmatouse@redhat.com>
Signed-off-by: David Howells <dhowells@redhat.com>

2015-09-25 16:30:08 +01:00

apparmor

Minor merge needed, due to function move.

2015-07-01 10:49:25 -07:00

integrity

Minor merge needed, due to function move.

2015-07-01 10:49:25 -07:00

keys

KEYS: Fix race between key destruction and finding a keyring by name

2015-09-25 16:30:08 +01:00

selinux

mm: mark most vm_operations_struct const