Tetsuo Handa d337537181 smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi ... [ Upstream commit 0934ad42bb ] syzbot is reporting UAF at cipso_v4_doi_search() [1], for smk_cipso_doi() is calling kfree() without removing from the cipso_v4_doi_list list after netlbl_cfg_cipsov4_map_add() returned an error. We need to use netlbl_cfg_cipsov4_del() in order to remove from the list and wait for RCU grace period before kfree(). Link: https://syzkaller.appspot.com/bug?extid=93dba5b91f0fed312cbd [1] Reported-by: syzbot <syzbot+93dba5b91f0fed312cbd@syzkaller.appspotmail.com> Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> Fixes: 6c2e8ac095 ("netlabel: Update kernel configuration API") Signed-off-by: Casey Schaufler <casey@schaufler-ca.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2021-11-18 14:04:10 +01:00
..
apparmor
bpf
integrity	evm: mark evm_fixmode as __ro_after_init	2021-11-18 14:03:46 +01:00
keys	KEYS: trusted: Fix memory leak on object td	2021-05-19 10:12:50 +02:00
loadpin
lockdown
safesetid
selinux	selinux: fix race condition when computing ocontext SIDs	2021-11-18 14:03:44 +01:00
smack	smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi	2021-11-18 14:04:10 +01:00
tomoyo
yama
commoncap.c
device_cgroup.c
inode.c
Kconfig
Kconfig.hardening
lsm_audit.c
Makefile
min_addr.c
security.c	binder: use cred instead of task for selinux checks	2021-11-18 14:03:36 +01:00