Fan Wu 2776e9c285 ipe: protect the dm-verity root hash with RCU ...

ipe_bdev_setintegrity() frees the old root hash when dm-verity publishes
a new one on ->preresume, while policy evaluation can still be
dereferencing it.

Protect the root hash with RCU. The evaluation path already runs under
rcu_read_lock().

Fixes: e155858dd9 ("ipe: add support for dm-verity as a trust provider")
Cc: [email protected]
Assisted-by: LLM
[FW: remove model name according to latest guideline]
Signed-off-by: Fan Wu <[email protected]>

2026-09-25 13:30:27 -07:00

..

.gitignore

scripts: add boot policy generation program

2024-08-20 14:03:39 -04:00

audit.c

treewide: change inode->i_ino from unsigned long to u64

2026-03-06 14:31:28 +01:00

audit.h

ipe: add permissive toggle

2024-08-20 14:02:27 -04:00

digest.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

digest.h

ipe: add support for dm-verity as a trust provider

2024-08-20 14:02:45 -04:00

eval.c

ipe: protect the dm-verity root hash with RCU

2026-09-25 13:30:27 -07:00

eval.h

ipe: protect the dm-verity root hash with RCU

2026-09-25 13:30:27 -07:00

fs.c

ipe: fix use-after-free when auditing a newly loaded policy

2026-09-25 13:30:27 -07:00

fs.h

ipe: add userspace interface

2024-08-20 14:02:15 -04:00

hooks.c

ipe: protect the dm-verity root hash with RCU

2026-09-25 13:30:27 -07:00

hooks.h

ipe: Add AT_EXECVE_CHECK support for script enforcement

2025-12-02 19:37:01 -08:00

ipe.c

Merge tag 'ipe-pr-20251202' of git://git.kernel.org/pub/scm/linux/kernel/git/wufan/ipe

2025-12-03 11:19:34 -08:00

ipe.h

ipe: move initcalls to the LSM framework

2025-10-22 19:24:25 -04:00

Kconfig

ipe: use SHA-256 library API instead of crypto_shash API

2025-07-28 18:54:18 -07:00

Makefile

ipe: kunit test for parser

2024-08-20 14:03:43 -04:00

policy_fs.c

ipe: fix use-after-free when auditing a newly loaded policy

2026-09-25 13:30:27 -07:00

policy_parser.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

policy_parser.h

…

policy_tests.c

ipe: Add missing terminator to list of unit tests

2024-09-23 15:53:37 -04:00

policy.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

policy.h

ipe: enable support for fs-verity as a trust provider

2024-08-20 14:03:35 -04:00