Zhen Lei e12d520dc1 selinux: fix potential counting error in avc_add_xperms_decision() ...

commit 379d9af3f3da2da1bbfa67baf1820c72a080d1f1 upstream.

The count increases only when a node is successfully added to
the linked list.

Cc: stable@vger.kernel.org
Fixes: fa1aa143ac4a ("selinux: extended permissions for ioctls")
Signed-off-by: Zhen Lei <thunder.leizhen@huawei.com>
Acked-by: Stephen Smalley <stephen.smalley.work@gmail.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit 5d93f05ed258c92a8925b74bc36101af36c22732)
Signed-off-by: Vegard Nossum <vegard.nossum@oracle.com>

2024-10-24 10:07:36 +00:00

..

apparmor

apparmor: avoid crash when parsed profile name is empty

2024-02-02 11:33:46 +00:00

integrity

integrity: Fix possible multiple allocation in integrity_inode_get()

2023-08-11 11:33:41 +02:00

keys

security: keys: perform capable check only on privileged operations

2023-09-23 10:46:53 +02:00

loadpin

…

selinux

selinux: fix potential counting error in avc_add_xperms_decision()

2024-10-24 10:07:36 +00:00

smack

smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()

2024-05-30 08:58:49 +00:00

tomoyo

lsm: new security_file_ioctl_compat() hook

2024-03-08 08:21:39 +00:00

yama

Yama: Check for pid death before checking ancestry

2019-01-23 08:09:48 +01:00

commoncap.c

capabilities: fix potential memleak on error path from vfs_getxattr_alloc()

2022-11-10 15:47:23 +01:00

device_cgroup.c

device_cgroup: Roll back to original exceptions after copy failure

2023-01-18 09:26:38 +01:00

inode.c

securityfs: fix use-after-free on symlink traversal

2019-05-25 18:25:34 +02:00

Kconfig

/dev/mem: Add bounce buffer for copy-out

2018-03-24 11:01:24 +01:00

lsm_audit.c

dump_common_audit_data(): fix racy accesses to ->d_name

2021-01-23 15:48:43 +01:00

Makefile

…

min_addr.c

…

security.c

lsm: new security_file_ioctl_compat() hook

2024-03-08 08:21:39 +00:00