ipe/stable-7.3 PR 20260925

Browse source

-----BEGIN PGP SIGNATURE-----
 
 iHUEABYIAB0WIQQzmBmZPBN6m/hUJmnyomI6a/yO7QUCarbccwAKCRDyomI6a/yO
 7YKCAQDsDhTU3Rq7HCUgCkGYpZnsTAqXo3JeDP66Ku6Y0bOJjAEAhyRelXr+tKFW
 aYpuOn3qF+tihTJ52RWzAhQzEQ1BRQY=
 =QEqL
 -----END PGP SIGNATURE-----

Merge tag 'ipe-pr-20260925' of git://git.kernel.org/pub/scm/linux/kernel/git/wufan/ipe

Pull IPE fixes from Fan Wu:
 "Two fixes for use-after-free issues found by recent LLM-assisted code
  analysis.

   - move successful policy load auditing under the new policy
     directory's inode lock, preventing a concurrent policy deletion
     from freeing the policy while it is still being audited

   - protect the dm-verity root hash with RCU, preventing policy
     evaluation from racing with root hash replacement during preresume"

* tag 'ipe-pr-20260925' of git://git.kernel.org/pub/scm/linux/kernel/git/wufan/ipe:
  ipe: protect the dm-verity root hash with RCU
  ipe: fix use-after-free when auditing a newly loaded policy

...

This commit is contained in:

Linus Torvalds 2026-09-25 15:55:03 -07:00

parent 049380360c 2776e9c285

commit 75467f60a3

5 changed files with 32 additions and 15 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

12

security/ipe/eval.c

View file

2

security/ipe/eval.h

View file

8

security/ipe/fs.c

View file

22

security/ipe/hooks.c

View file

3

security/ipe/policy_fs.c

View file