[PATCH 2/2] ipe: protect the dm-verity root hash with RCU
sashiko-bot at kernel.org
sashiko-bot at kernel.org
Wed Sep 23 03:20:01 UTC 2026
> ipe_bdev_setintegrity() frees the old root hash when dm-verity publishes
> a new one on ->preresume, while policy evaluation can still be
> dereferencing it.
>
> Protect the root hash with RCU. The evaluation path already runs under
> rcu_read_lock().
>
> Fixes: e155858dd995 ("ipe: add support for dm-verity as a trust provider")
> Cc: stable at vger.kernel.org
> Assisted-by: claude-opus-5.5
> Signed-off-by: Fan Wu <wufan at kernel.org>
Sashiko has reviewed this patch and found no issues. It looks great!
--
Sashiko AI review · https://sashiko.dev/#/patchset/20260923031349.1216431-1-wufan@kernel.org?part=2
More information about the Linux-security-module-archive
mailing list