moonjuice/kernel_arpi
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
Files
ae1fffdf3b95d7ef2dbcc5aeab80db2a2ce06cb5
kernel_arpi/security
History
Tetsuo Handa c6293f673f smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi 
[ Upstream commit 0934ad42bb2c5df90a1b9de690f93de735b622fe ]

syzbot is reporting UAF at cipso_v4_doi_search() [1], for smk_cipso_doi()
is calling kfree() without removing from the cipso_v4_doi_list list after
netlbl_cfg_cipsov4_map_add() returned an error. We need to use
netlbl_cfg_cipsov4_del() in order to remove from the list and wait for
RCU grace period before kfree().

Link: https://syzkaller.appspot.com/bug?extid=93dba5b91f0fed312cbd [1]
Reported-by: syzbot <syzbot+93dba5b91f0fed312cbd@syzkaller.appspotmail.com>
Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Fixes: 6c2e8ac095 ("netlabel: Update kernel configuration API")
Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2021-11-18 19:16:39 +01:00
..
apparmor
apparmor: use get_unaligned() only for multi-byte words
2021-05-17 13:30:29 +02:00
bpf
bpf: Implement task local storage
2020-11-06 08:08:37 -08:00
integrity
ima: fix deadlock when traversing "ima_default_rules".
2021-11-18 19:16:31 +01:00
keys
ucounts: Move get_ucounts from cred_alloc_blank to key_change_session_keyring
2021-10-20 10:34:20 -05:00
landlock
landlock: Enable user space to infer supported features
2021-04-22 12:22:11 -07:00
loadpin
LSM: Add "contents" flag to kernel_read_file hook
2020-10-05 13:37:03 +02:00
lockdown
Merge branch 'next-general' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
2020-06-02 17:36:24 -07:00
safesetid
LSM: SafeSetID: Mark safesetid_initialized as __initdata
2021-06-10 09:52:32 -07:00
selinux
selinux: fix race condition when computing ocontext SIDs
2021-11-18 19:15:57 +01:00
smack
smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
2021-11-18 19:16:39 +01:00
tomoyo
mm/pagemap: add mmap_assert_locked() annotations to find_vma*()
2021-09-03 09:58:13 -07:00
yama
task_work: cleanup notification modes
2020-10-17 15:05:30 -06:00
commoncap.c
Merge tag 'fixes-v5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
2021-04-27 19:32:55 -07:00
device_cgroup.c
device_cgroup: Fix RCU list debugging warning
2020-08-20 11:25:03 -07:00
inode.c
…
Kconfig
landlock: Set up the security framework and manage credentials
2021-04-22 12:22:10 -07:00
Kconfig.hardening
hardening: Clarify Kconfig text for auto-var-init
2021-07-20 23:02:59 -07:00
lsm_audit.c
audit: remove unnecessary 'ret' initialization
2021-06-11 13:21:28 -04:00
Makefile
security: remove unneeded subdir-$(CONFIG_...)
2021-09-03 08:17:20 +09:00
min_addr.c
…
security.c
binder: use cred instead of task for selinux checks
2021-11-12 15:05:48 +01:00