kernel/linux
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ synced 2026-10-18 19:12:56 +00:00
Code Issues Releases Packages Activity
linux/security/integrity
History
Daniel Hodges 125da5d64d ima: check return value of crypto_shash_final() in boot aggregate 
[ Upstream commit 870819434c ]

The return value of crypto_shash_final() is not checked in
ima_calc_boot_aggregate_tfm(). If the hash finalization fails, the
function returns success and a corrupted boot aggregate digest could
be used for IMA measurements.

Capture the return value and propagate any error to the caller.

Fixes: 76bb28f612 ("ima: use new crypto_shash API instead of old crypto_hash")
Signed-off-by: Daniel Hodges <hodgesd@meta.com>
Reviewed-by: Roberto Sassu <roberto.sassu@huawei.com>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
History 2026-06-01 17:35:34 +02:00
..
evm evm: Fix build warnings 2023-07-23 13:46:48 +02:00
ima ima: check return value of crypto_shash_final() in boot aggregate 2026-06-01 17:35:34 +02:00
platform_certs efi: Add iMac Pro 2017 to uefi skip cert quirk 2023-01-12 11:58:56 +01:00
digsig.c integrity: Fix memory leakage in keyring allocation error path 2022-12-31 13:14:10 +01:00
digsig_asymmetric.c ima: fix reference leak in asymmetric_verify() 2022-02-16 12:56:03 +01:00
iint.c ima: annotate iint mutex to avoid lockdep false positive warnings 2023-11-28 16:56:29 +00:00
integrity.h ima: detect changes to the backing overlay file 2023-11-28 16:56:29 +00:00
integrity_audit.c integrity: check the return value of audit_log_start() 2022-02-16 12:56:03 +01:00
Kconfig powerpc: Load firmware trusted keys/hashes into kernel keyring 2019-11-13 00:33:23 +11:00
Makefile powerpc: Load firmware trusted keys/hashes into kernel keyring 2019-11-13 00:33:23 +11:00