Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Stefan Berger 480afcbeb7 ima: Fix use-after-free on a dentry's dname.name ... commit be84f32bb2c981ca670922e047cdde1488b233de upstream. ->d_name.name can change on rename and the earlier value can be freed; there are conditions sufficient to stabilize it (->d_lock on dentry, ->d_lock on its parent, ->i_rwsem exclusive on the parent's inode, rename_lock), but none of those are met at any of the sites. Take a stable snapshot of the name instead. Link: https://lore.kernel.org/all/20240202182732.GE2087318@ZenIV/ Signed-off-by: Al Viro <viro@zeniv.linux.org.uk> Signed-off-by: Stefan Berger <stefanb@linux.ibm.com> Signed-off-by: Mimi Zohar <zohar@linux.ibm.com> [ Samasth: bp to fix CVE-2024-39494; Minor conflict resolved due to code context change ] Signed-off-by: Samasth Norway Ananda <samasth.norway.ananda@oracle.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2025-03-13 12:43:19 +01:00
..
apparmor	apparmor: fix 'Do simple duplicate message elimination'	2024-12-14 19:44:34 +01:00
integrity	ima: Fix use-after-free on a dentry's dname.name	2025-03-13 12:43:19 +01:00
keys	security/keys: fix slab-out-of-bounds in key_task_permission	2024-11-17 14:58:50 +01:00
loadpin
lockdown
safesetid
selinux	selinux: ignore unknown extended permissions	2025-01-09 13:23:33 +01:00
smack	smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso	2024-11-08 16:20:30 +01:00
tomoyo	tomoyo: don't emit warning in tomoyo_write_control()	2025-03-13 12:43:03 +01:00
yama
commoncap.c
device_cgroup.c
inode.c
Kconfig	proc: add config & param to block forcing mem writes	2024-11-08 16:20:38 +01:00
Kconfig.hardening
lsm_audit.c
Makefile
min_addr.c
security.c	lsm: new security_file_ioctl_compat() hook	2024-02-23 08:25:15 +01:00