Star64_linux/security/integrity
Tianjia Zhang b50d4a126b integrity: Fix possible multiple allocation in integrity_inode_get()
commit 9df6a4870d upstream.

When integrity_inode_get() is querying and inserting the cache, there
is a conditional race in the concurrent environment.

The race condition is the result of not properly implementing
"double-checked locking". In this case, it first checks to see if the
iint cache record exists before taking the lock, but doesn't check
again after taking the integrity_iint_lock.

Fixes: bf2276d10c ("ima: allocating iint improvements")
Signed-off-by: Tianjia Zhang <tianjia.zhang@linux.alibaba.com>
Cc: Dmitry Kasatkin <dmitry.kasatkin@gmail.com>
Cc: <stable@vger.kernel.org> # v3.10+
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2023-08-20 15:24:48 +08:00
..
evm evm: Fix build warnings 2023-08-20 15:24:17 +08:00
ima ima: Fix build warnings 2023-08-20 15:24:17 +08:00
platform_certs efi: Add iMac Pro 2017 to uefi skip cert quirk 2023-04-19 17:58:16 +08:00
digsig.c integrity: Fix memory leakage in keyring allocation error path 2023-04-19 17:57:23 +08:00
digsig_asymmetric.c ima: fix reference leak in asymmetric_verify() 2023-04-19 17:45:10 +08:00
iint.c integrity: Fix possible multiple allocation in integrity_inode_get() 2023-08-20 15:24:48 +08:00
integrity.h crypto: sha - split sha.h into sha1.h and sha2.h 2020-11-20 14:45:33 +11:00
integrity_audit.c integrity: check the return value of audit_log_start() 2023-04-19 17:45:10 +08:00
Kconfig powerpc: Load firmware trusted keys/hashes into kernel keyring 2019-11-13 00:33:23 +11:00
Makefile powerpc: Load firmware trusted keys/hashes into kernel keyring 2019-11-13 00:33:23 +11:00