Fan Wu 2776e9c285 ipe: protect the dm-verity root hash with RCU ... ipe_bdev_setintegrity() frees the old root hash when dm-verity publishes a new one on ->preresume, while policy evaluation can still be dereferencing it. Protect the root hash with RCU. The evaluation path already runs under rcu_read_lock(). Fixes: e155858dd9 ("ipe: add support for dm-verity as a trust provider") Cc: stable@vger.kernel.org Assisted-by: LLM [FW: remove model name according to latest guideline] Signed-off-by: Fan Wu <wufan@kernel.org>		2026-09-25 13:30:27 -07:00
..
.gitignore
audit.c	treewide: change inode->i_ino from unsigned long to u64	2026-03-06 14:31:28 +01:00
audit.h
digest.c	Convert 'alloc_obj' family to use the new default GFP_KERNEL argument	2026-02-21 17:09:51 -08:00
digest.h
eval.c	ipe: protect the dm-verity root hash with RCU	2026-09-25 13:30:27 -07:00
eval.h	ipe: protect the dm-verity root hash with RCU	2026-09-25 13:30:27 -07:00
fs.c	ipe: fix use-after-free when auditing a newly loaded policy	2026-09-25 13:30:27 -07:00
fs.h
hooks.c	ipe: protect the dm-verity root hash with RCU	2026-09-25 13:30:27 -07:00
hooks.h	ipe: Add AT_EXECVE_CHECK support for script enforcement	2025-12-02 19:37:01 -08:00
ipe.c	ipe/stable-6.19 PR 20251202	2025-12-03 11:19:34 -08:00
ipe.h	ipe: move initcalls to the LSM framework	2025-10-22 19:24:25 -04:00
Kconfig	ipe: use SHA-256 library API instead of crypto_shash API	2025-07-28 18:54:18 -07:00
Makefile
policy_fs.c	ipe: fix use-after-free when auditing a newly loaded policy	2026-09-25 13:30:27 -07:00
policy_parser.c	Convert 'alloc_obj' family to use the new default GFP_KERNEL argument	2026-02-21 17:09:51 -08:00
policy_parser.h
policy_tests.c
policy.c	Convert 'alloc_obj' family to use the new default GFP_KERNEL argument	2026-02-21 17:09:51 -08:00
policy.h