All of lore.kernel.org
 help / color / mirror / Atom feed
* [GIT PULL] KEYS changes for v7.3-rc7
@ 2026-10-05 22:46 Jarkko Sakkinen
  2026-10-06  3:03 ` Linus Torvalds
  2026-10-06  3:04 ` pr-tracker-bot
  0 siblings, 2 replies; 4+ messages in thread
From: Jarkko Sakkinen @ 2026-10-05 22:46 UTC (permalink / raw)
  To: Linus Torvalds
  Cc: David Howells, Herbert Xu, David S. Miller, keyrings,
	linux-integrity

Hi,

I've started to take steps towards better quality PRs. 

Br, Jarkko

The following changes since commit 7704c4c5bb127673b4f0ead839919db573559e38:

  Merge tag 'i2c-fixes-7.3-rc6' of git://git.kernel.org/pub/scm/linux/kernel/git/andi.shyti/linux (2026-10-04 09:38:11 -0700)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/jarkko/linux-tpmdd.git tags/keys-v7.3-rc7

for you to fetch changes up to dd3ea3fcba7c75493760cdbccd35f029597e8d5e:

  KEYS: Fix add_key() race with keyring restriction (2026-10-04 21:09:32 +0300)

----------------------------------------------------------------
KEYS changes for v7.3-rc7

This pull request contains two critical bug fixes, which can be briefly
descibed as follows:

1. key_get_persistent() creates a new persisten keyring for UID  if it does
   not exist yet, and creates a link from it to the nominated keyring.
   Function did not set timeout when linking failed, therefore preventing
   GC. The bug was addressed by calling key_set_timeout() regardless of
   key_link() result when the persistent keyring gets created by
   key_get_persistent().
2. __key_create_or_update() made a copy of keyring->restrict_link before
   holding keyring->sem, which can cause add_key() to be executed against
   stale keyring restrictions. The bug was fixed by copying the value only
   after keyring->sem was taken.

Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org>

----------------------------------------------------------------
Karl Mehltretter (1):
      keys: finalize persistent keyring timeout after link attempt

성병찬 (1):
      KEYS: Fix add_key() race with keyring restriction

 security/keys/key.c        |  6 ++---
 security/keys/persistent.c | 55 +++++++++++++++++++++++++++-------------------
 2 files changed, 35 insertions(+), 26 deletions(-)

^ permalink raw reply	[flat|nested] 4+ messages in thread

end of thread, other threads:[~2026-10-06  6:33 UTC | newest]

Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-10-05 22:46 [GIT PULL] KEYS changes for v7.3-rc7 Jarkko Sakkinen
2026-10-06  3:03 ` Linus Torvalds
2026-10-06  6:33   ` Jarkko Sakkinen
2026-10-06  3:04 ` pr-tracker-bot

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.