[PATCH v2] cred: prevent slab cache merging for cred_jar

Paul Moore paul at paul-moore.com
Wed Sep 9 21:48:34 UTC 2026


On Jun 11, 2026 Mohammed EL Kadiri <med08elkadiri at gmail.com> wrote:
> 
> Add SLAB_NO_MERGE to cred_jar to ensure struct cred objects get
> dedicated slab pages, preventing the allocator from merging this
> cache with other similarly-sized caches. This is a hardening measure
> to provide type isolation for credential objects.
> 
> Reviewed-by: Kees Cook <kees at kernel.org>
> Signed-off-by: Mohammed EL Kadiri <med08elkadiri at gmail.com>
> ---
> Changes in v2:
>   - Collected Reviewed-by tag from Kees Cook.
>   - No code changes from v1.
> 
>  kernel/cred.c | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)

Merged into lsm/dev, thanks!

--
paul-moore.com



More information about the Linux-security-module-archive mailing list