David Gstir 1c486a6477 KEYS: trusted: dcp: fix improper sg use with CONFIG_VMAP_STACK=y ...

With vmalloc stack addresses enabled (CONFIG_VMAP_STACK=y) DCP trusted
keys can crash during en- and decryption of the blob encryption key via
the DCP crypto driver. This is caused by improperly using sg_init_one()
with vmalloc'd stack buffers (plain_key_blob).

Fix this by always using kmalloc() for buffers we give to the DCP crypto
driver.

Cc: stable@vger.kernel.org # v6.10+
Fixes: 0e28bf61a5f9 ("KEYS: trusted: dcp: fix leak of blob encryption key")
Signed-off-by: David Gstir <david@sigma-star.at>
Reviewed-by: Jarkko Sakkinen <jarkko@kernel.org>
Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org>

2025-01-07 18:48:23 +02:00

..

encrypted-keys

KEYS: encrypted: add missing MODULE_DESCRIPTION()

2024-07-01 14:16:54 +00:00

trusted-keys

KEYS: trusted: dcp: fix improper sg use with CONFIG_VMAP_STACK=y

2025-01-07 18:48:23 +02:00

big_key.c

big_keys: Use struct for internal payload

2022-05-16 16:02:21 -07:00

compat_dh.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152

2019-05-30 11:26:32 -07:00

compat.c

security/keys: remove compat_keyctl_instantiate_key_iov

2020-10-03 00:02:16 -04:00

dh.c

KEYS: DH: Use crypto_wait_req

2023-02-13 18:34:48 +08:00

gc.c

keys: update key quotas in key_put()

2024-05-09 16:28:58 +03:00

internal.h

keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry

2023-12-21 13:47:38 +00:00

Kconfig

KEYS: trusted: allow use of TEE as backend without TCG_TPM support

2022-05-23 18:47:50 +03:00

key.c

keys: Fix overwrite of key expiration on instantiation

2024-05-09 16:28:58 +03:00

keyctl_pkey.c

KEYS: fix length validation in keyctl_pkey_params_get_2()

2022-03-08 10:33:18 +02:00

keyctl.c

task_work: s/task_work_cancel()/task_work_cancel_func()/

2024-07-09 13:26:31 +02:00

keyring.c

security/keys: fix slab-out-of-bounds in key_task_permission

2024-11-04 21:24:24 +02:00

Makefile

KEYS: remove CONFIG_KEYS_COMPAT

2019-12-12 23:41:17 +02:00

permission.c

keys: Make the KEY_NEED_* perms an enum rather than a mask

2020-05-19 15:42:22 +01:00

persistent.c

Revert "Merge tag 'keys-acl-20190703' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs"

2019-07-10 18:43:43 -07:00

proc.c

keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry

2023-12-21 13:47:38 +00:00

process_keys.c

ucounts: Move get_ucounts from cred_alloc_blank to key_change_session_keyring

2021-10-20 10:34:20 -05:00

request_key_auth.c

KEYS: Replace all non-returning strlcpy with strscpy

2023-08-17 20:12:35 +00:00

request_key.c

keys: Fix linking a duplicate key to a keyring's assoc_array

2023-07-17 19:32:30 +00:00

sysctl.c

lsm: remove the now superfluous sentinel element from ctl_table array

2024-04-15 15:00:00 -04:00

user_defined.c

mm, treewide: rename kzfree() to kfree_sensitive()

2020-08-07 11:33:22 -07:00