David Gstir e8d9fab39d KEYS: trusted: dcp: fix improper sg use with CONFIG_VMAP_STACK=y ... With vmalloc stack addresses enabled (CONFIG_VMAP_STACK=y) DCP trusted keys can crash during en- and decryption of the blob encryption key via the DCP crypto driver. This is caused by improperly using sg_init_one() with vmalloc'd stack buffers (plain_key_blob). Fix this by always using kmalloc() for buffers we give to the DCP crypto driver. Cc: stable@vger.kernel.org # v6.10+ Fixes: 0e28bf61a5 ("KEYS: trusted: dcp: fix leak of blob encryption key") Signed-off-by: David Gstir <david@sigma-star.at> Reviewed-by: Jarkko Sakkinen <jarkko@kernel.org> Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org>		2025-01-21 11:25:23 +02:00
..
encrypted-keys	KEYS: encrypted: add missing MODULE_DESCRIPTION()	2024-07-01 14:16:54 +00:00
trusted-keys	KEYS: trusted: dcp: fix improper sg use with CONFIG_VMAP_STACK=y	2025-01-21 11:25:23 +02:00
big_key.c	big_keys: Use struct for internal payload	2022-05-16 16:02:21 -07:00
compat.c	security/keys: remove compat_keyctl_instantiate_key_iov	2020-10-03 00:02:16 -04:00
compat_dh.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152	2019-05-30 11:26:32 -07:00
dh.c	KEYS: DH: Use crypto_wait_req	2023-02-13 18:34:48 +08:00
gc.c	keys: update key quotas in key_put()	2024-05-09 16:28:58 +03:00
internal.h	keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry	2023-12-21 13:47:38 +00:00
Kconfig	KEYS: trusted: allow use of TEE as backend without TCG_TPM support	2022-05-23 18:47:50 +03:00
key.c	keys: Fix overwrite of key expiration on instantiation	2024-05-09 16:28:58 +03:00
keyctl.c	task_work: s/task_work_cancel()/task_work_cancel_func()/	2024-07-09 13:26:31 +02:00
keyctl_pkey.c	KEYS: fix length validation in keyctl_pkey_params_get_2()	2022-03-08 10:33:18 +02:00
keyring.c	security/keys: fix slab-out-of-bounds in key_task_permission	2024-11-04 21:24:24 +02:00
Makefile	KEYS: remove CONFIG_KEYS_COMPAT	2019-12-12 23:41:17 +02:00
permission.c	keys: Make the KEY_NEED_* perms an enum rather than a mask	2020-05-19 15:42:22 +01:00
persistent.c	Revert "Merge tag 'keys-acl-20190703' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs"	2019-07-10 18:43:43 -07:00
proc.c	keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry	2023-12-21 13:47:38 +00:00
process_keys.c	ucounts: Move get_ucounts from cred_alloc_blank to key_change_session_keyring	2021-10-20 10:34:20 -05:00
request_key.c	keys: Fix linking a duplicate key to a keyring's assoc_array	2023-07-17 19:32:30 +00:00
request_key_auth.c	KEYS: Replace all non-returning strlcpy with strscpy	2023-08-17 20:12:35 +00:00
sysctl.c	lsm: remove the now superfluous sentinel element from ctl_table array	2024-04-15 15:00:00 -04:00
user_defined.c	mm, treewide: rename kzfree() to kfree_sensitive()	2020-08-07 11:33:22 -07:00