Al Viro 08eb8a735c dump_common_audit_data(): fix racy accesses to ->d_name ... commit d36a1dd9f7 upstream. We are not guaranteed the locking environment that would prevent dentry getting renamed right under us. And it's possible for old long name to be freed after rename, leading to UAF here. Cc: stable@kernel.org # v2.6.2+ Signed-off-by: Al Viro <viro@zeniv.linux.org.uk> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2021-01-19 18:26:16 +01:00
..
apparmor	apparmor: ensure that dfa state tables have entries	2020-07-22 09:33:05 +02:00
integrity	ima: Don't modify file descriptor mode on the fly	2020-12-30 11:51:39 +01:00
keys	mm: add kvfree_sensitive() for freeing sensitive data objects	2020-06-17 16:40:23 +02:00
loadpin	proc/sysctl: add shared variables for range check	2019-07-18 17:08:07 -07:00
lockdown	lockdown: Allow unprivileged users to see lockdown status	2020-06-22 09:30:53 +02:00
safesetid	LSM: SafeSetID: Stop releasing uninitialized ruleset	2019-09-17 11:27:05 -07:00
selinux	selinux: fix inode_doinit_with_dentry() LABEL_INVALID error handling	2020-12-30 11:51:05 +01:00
smack	Smack: prevent underflow in smk_set_cipso()	2020-08-19 08:16:16 +02:00
tomoyo	tomoyo: Use atomic_t for statistics counter	2020-02-05 21:22:41 +00:00
yama	proc/sysctl: add shared variables for range check	2019-07-18 17:08:07 -07:00
Kconfig	Merge branch 'next-lockdown' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security	2019-09-28 08:14:15 -07:00
Kconfig.hardening	meminit fix	2019-07-28 12:33:15 -07:00
Makefile	security: Add a static lockdown policy LSM	2019-08-19 21:54:15 -07:00
commoncap.c	exec: Always set cap_ambient in cap_bprm_set_creds	2020-06-03 08:21:23 +02:00
device_cgroup.c	device_cgroup: Fix RCU list debugging warning	2020-10-01 13:18:13 +02:00
inode.c	Merge branch 'work.mount0' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2019-07-19 10:42:02 -07:00
lsm_audit.c	dump_common_audit_data(): fix racy accesses to ->d_name	2021-01-19 18:26:16 +01:00
min_addr.c	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
security.c	Merge branch 'next-lockdown' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security	2019-09-28 08:14:15 -07:00