Tetsuo Handa aa88387bb8 smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi ...

[ Upstream commit 0934ad42bb2c5df90a1b9de690f93de735b622fe ]

syzbot is reporting UAF at cipso_v4_doi_search() [1], for smk_cipso_doi()
is calling kfree() without removing from the cipso_v4_doi_list list after
netlbl_cfg_cipsov4_map_add() returned an error. We need to use
netlbl_cfg_cipsov4_del() in order to remove from the list and wait for
RCU grace period before kfree().

Link: https://syzkaller.appspot.com/bug?extid=93dba5b91f0fed312cbd [1]
Reported-by: syzbot <syzbot+93dba5b91f0fed312cbd@syzkaller.appspotmail.com>
Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Fixes: 6c2e8ac0953fccdd ("netlabel: Update kernel configuration API")
Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2021-11-26 11:40:31 +01:00

..

Kconfig

Smack: Signal delivery as an append operation

2016-09-08 13:22:56 -07:00

Makefile

Smack: Repair netfilter dependency

2015-01-23 10:08:19 -08:00

smack_access.c

Smack: Fix wrong semantics in smk_access_entry()

2021-09-22 11:45:27 +02:00

smack_lsm.c

smack: use GFP_NOFS while holding inode_smack::smk_lock

2019-10-07 18:55:22 +02:00

smack_netfilter.c

netfilter: nf_hook_ops structs can be const

2017-07-31 19:10:44 +02:00

smack.h

Smack: Use cap_capable in privilege check

2017-06-01 09:27:21 -07:00

smackfs.c

smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi

2021-11-26 11:40:31 +01:00