Zhen Lei 3337cb6327 selinux: fix potential counting error in avc_add_xperms_decision() ...

commit 379d9af3f3 upstream.

The count increases only when a node is successfully added to
the linked list.

Cc: stable@vger.kernel.org
Fixes: fa1aa143ac ("selinux: extended permissions for ioctls")
Signed-off-by: Zhen Lei <thunder.leizhen@huawei.com>
Acked-by: Stephen Smalley <stephen.smalley.work@gmail.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2024-09-04 13:23:17 +02:00

..

apparmor

apparmor: Fix null pointer deref when receiving skb during sock creation

2024-08-19 05:45:25 +02:00

bpf

…

integrity

ima: Avoid blocking in RCU read-side critical section

2024-07-18 13:07:34 +02:00

keys

task_work: s/task_work_cancel()/task_work_cancel_func()/

2024-08-19 05:45:13 +02:00

landlock

landlock: Don't lose track of restrictions on cred_transfer

2024-08-19 05:45:10 +02:00

loadpin

LoadPin: Ignore the "contents" argument of the LSM hooks

2022-12-31 13:14:45 +01:00

lockdown

…

safesetid

…

selinux

selinux: fix potential counting error in avc_add_xperms_decision()

2024-09-04 13:23:17 +02:00

smack

ima: Avoid blocking in RCU read-side critical section

2024-07-18 13:07:34 +02:00

tomoyo

tomoyo: fix UAF write bug in tomoyo_write_control()

2024-03-06 14:38:48 +00:00

yama

…

commoncap.c

capabilities: fix potential memleak on error path from vfs_getxattr_alloc()

2022-11-10 18:15:39 +01:00

device_cgroup.c

device_cgroup: Roll back to original exceptions after copy failure

2023-01-12 11:58:59 +01:00

inode.c

…

Kconfig

…

Kconfig.hardening

security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6

2022-12-31 13:14:46 +01:00

lsm_audit.c

…

Makefile

…

min_addr.c

…

security.c

ima: Avoid blocking in RCU read-side critical section

2024-07-18 13:07:34 +02:00