[GIT PULL] KEYS: changes for v7.4-rc3

[GIT PULL] KEYS: changes for v7.4-rc3

[Jarkko Sakkinen]

The following changes since commit 05441d697f7f9a927264f4058cbbc6a03dfcac9d:

  Merge tag 'cocci-7.4-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/jlawall/linux (2026-11-03 08:36:32 -0800)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/jarkko/linux-tpmdd.git tags/keys-v7.4-rc3

for you to fetch changes up to 51bcd09b9ffca7a2a3b66fb57182bb391364f612:

  KEYS: Protect the update method check against type removal (2026-11-05 19:19:36 +0200)

----------------------------------------------------------------
[GIT PULL] KEYS: changes for v7.4-rc3

The first three bug fixes are side-products of the rhashtable work, which

1. Expand key->datalen and key->quotalen in order to avoid integer
   truncation and the leak of quota.
2. Enforce KEY_MAX_DESC_SIZE limits across in-kernel and payload-generated
   paths.
3. Verify the key identity in __key_unlink_begin() as type and description
   could also refer to a more recently linked key with matching properties
   as the one being unlinked.

51bcd09b9ffc ("KEYS: Protect the update method check against type removal")
highlights the disperancy of being able to remove key types while keys of
that type still exist.

As a consequence, I've implemented a patch series, which pins the key types to
their LKMs, and removes key_type_dead related keyring GC functionality as the
net result:

https://lore.kernel.org/keyrings/20261108222719.304712-1-jarkko@kernel.org/

Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org>

----------------------------------------------------------------
Cen Zhang (1):
      KEYS: Protect the update method check against type removal

Jarkko Sakkinen (3):
      KEYS: Expand key->{datalen,quotalen} to unsigned int
      KEYS: Reject descriptions larger than KEY_MAX_DESC_SIZE
      KEYS: Verify the key identity in __key_unlink_begin

 fs/smb/client/cifsacl.c     |  6 +++---
 include/linux/key.h         |  7 +++++--
 security/keys/key.c         | 26 ++++++++++++++++++--------
 security/keys/keyctl.c      |  2 --
 security/keys/keyring.c     | 13 ++++++++++++-
 security/keys/request_key.c | 14 ++++++++++++--
 6 files changed, 50 insertions(+), 18 deletions(-)

Re: [GIT PULL] KEYS: changes for v7.4-rc3

[Jarkko Sakkinen]

On Mon, Nov 09, 2026 at 06:53:42PM +0200, Jarkko Sakkinen wrote:
> [GIT PULL] KEYS: changes for v7.4-rc3
> 
> The first three bug fixes are side-products of the rhashtable work, which
                                                                    ~~~~~~~
								    :
(typo)

Br, Jarkko

Re: [GIT PULL] KEYS: changes for v7.4-rc3

[pr-tracker-bot]

The pull request you sent on Mon, 9 Nov 2026 18:53:42 +0200:

> git://git.kernel.org/pub/scm/linux/kernel/git/jarkko/linux-tpmdd.git tags/keys-v7.4-rc3

has been merged into torvalds/linux.git:
https://git.kernel.org/torvalds/c/f1bfe4003916a6d56e43b08698f38bad4443bcf4

Thank you!

-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/prtracker.html