[PATCH v2] keys: Fix UAF in key_put()

David Howells dhowells at redhat.com
Wed Mar 19 18:47:34 UTC 2025


Linus Torvalds <torvalds at linuxfoundation.org> wrote:

> We really should have "test_bit_acquire()" and "set_bit_release()".

I considered using test_bit_acquire() but, as you say, there's no
set_bit_release() as yet.  I could switch things to initialise the flag to set
on key creation and clear the flag instead.

David




More information about the Linux-security-module-archive mailing list