Stefan Berger dd431c3ac1 ima: Fix use-after-free on a dentry's dname.name ...

commit be84f32bb2 upstream.

->d_name.name can change on rename and the earlier value can be freed;
there are conditions sufficient to stabilize it (->d_lock on dentry,
->d_lock on its parent, ->i_rwsem exclusive on the parent's inode,
rename_lock), but none of those are met at any of the sites. Take a stable
snapshot of the name instead.

Link: https://lore.kernel.org/all/20240202182732.GE2087318@ZenIV/
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2024-06-21 14:38:48 +02:00

..

ima_api.c

ima: Fix use-after-free on a dentry's dname.name

2024-06-21 14:38:48 +02:00

ima_appraise.c

integrity: Always reference the blacklist keyring with appraisal

2023-08-01 08:17:25 -04:00

ima_asymmetric_keys.c

fs: port xattr to mnt_idmap

2023-01-19 09:24:28 +01:00

ima_crypto.c

mm, treewide: redefine MAX_ORDER sanely

2023-04-05 19:42:46 -07:00

ima_efi.c

ima: require signed IMA policy when UEFI secure boot is enabled

2023-08-01 08:18:11 -04:00

ima_fs.c

ima: Return error code obtained from securityfs functions

2022-02-15 11:17:01 -05:00

ima_init.c

ima: define ima_max_digest_data struct without a flexible array variable

2022-02-15 11:52:06 -05:00

ima_kexec.c

kexec_lock: Replace kexec_mutex() by kexec_lock() in two comments

2023-08-07 09:55:42 -04:00

ima_main.c

ima: detect changes to the backing overlay file

2023-11-28 17:20:03 +00:00

ima_modsig.c

ima: Fix build warnings

2023-06-06 09:37:23 -04:00

ima_mok.c

IMA: remove -Wmissing-prototypes warning

2021-07-23 08:05:06 -04:00

ima_policy.c

Merge tag 'integrity-v6.6' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity

2023-08-30 09:16:56 -07:00

ima_queue_keys.c

fs: port xattr to mnt_idmap

2023-01-19 09:24:28 +01:00

ima_queue.c

IMA: support for duplicate measurement records

2021-06-11 12:54:13 -04:00

ima_template_lib.c

ima: Fix use-after-free on a dentry's dname.name

2024-06-21 14:38:48 +02:00

ima_template_lib.h

ima: define a new template field named 'd-ngv2' and templates

2022-05-05 11:49:13 -04:00

ima_template.c

ima: Fix misuse of dereference of pointer in template_desc_init_fields()

2022-11-16 11:47:55 -05:00

ima.h

Merge tag 'integrity-v6.3' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity

2023-02-22 12:36:25 -08:00

Kconfig

ima: rework CONFIG_IMA dependency block

2023-09-27 11:52:12 -04:00

Makefile

ima: generalize x86/EFI arch glue for other EFI architectures

2020-11-06 07:40:42 +01:00