[PATCH v2 2/2] KEYS: Reject keyring creation with overridden credentials

sashiko-bot at kernel.org sashiko-bot at kernel.org
Mon Oct 19 16:18:03 UTC 2026


> If the current task is running with overridden credentials calling
> commit_creds() is forbidden and triggers a BUG_ON().
> 
> Reject keyring creation with -EPERM when credentials are overridden.
> 
> Cc: stable at vger.kernel.org # v5.10+
> Suggested-by: Jann Horn <jannh at google.com>
> Closes: https://lore.kernel.org/keyrings/CAG48ez0XjVSR=M--UBauTm8sJuc+ZbhKzaPa3a6wrSVHyoKevw@mail.gmail.com/
> Signed-off-by: Jarkko Sakkinen <jarkko at kernel.org>

Sashiko has reviewed this patch and found no issues.

-- 
Sashiko AI review · https://sashiko.dev/#/patchset/20261019145624.309790-1-jarkko@kernel.org?part=2




More information about the Linux-security-module-archive mailing list