linux-stable-mirror

mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git synced 2026-07-08 18:13:59 +02:00

Files

T

Daniel Hodges d592338c23 ima: check return value of crypto_shash_final() in boot aggregate

[ Upstream commit 870819434c ]

The return value of crypto_shash_final() is not checked in
ima_calc_boot_aggregate_tfm(). If the hash finalization fails, the
function returns success and a corrupted boot aggregate digest could
be used for IMA measurements.

Capture the return value and propagate any error to the caller.

Fixes: 76bb28f612 ("ima: use new crypto_shash API instead of old crypto_hash")
Signed-off-by: Daniel Hodges <hodgesd@meta.com>
Reviewed-by: Roberto Sassu <roberto.sassu@huawei.com>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2026-06-01 17:29:35 +02:00

apparmor

apparmor: fix race between freeing data and fs accessing it

2026-04-18 10:31:14 +02:00

bpf

…

integrity

ima: check return value of crypto_shash_final() in boot aggregate

2026-06-01 17:29:35 +02:00

keys

KEYS: trusted_tpm1: Compare HMAC values in constant time

2025-10-29 14:01:24 +01:00