Fedor PchelkinandGreg Kroah-Hartman 691aada756 apparmor: use kvfree_sensitive to free data->data ...

commit 2bc73505a5 upstream.

Inside unpack_profile() data->data is allocated using kvmemdup() so it
should be freed with the corresponding kvfree_sensitive().

Also add missing data->data release for rhashtable insertion failure path
in unpack_profile().

Found by Linux Verification Center (linuxtesting.org).

Fixes: e025be0f26 ("apparmor: support querying extended trusted helper extra data")
Cc: stable@vger.kernel.org
Signed-off-by: Fedor Pchelkin <pchelkin@ispras.ru>
Signed-off-by: John Johansen <john.johansen@canonical.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2024-08-03 08:54:16 +02:00

..

include

ima: Avoid blocking in RCU read-side critical section

2024-07-11 12:49:18 +02:00

.gitignore

…

apparmorfs.c

apparmor: Fix move_mount mediation by detecting if source is detached

2024-01-10 17:16:52 +01:00

audit.c

ima: Avoid blocking in RCU read-side critical section

2024-07-11 12:49:18 +02:00

capability.c

apparmor: pass cred through to audit info.

2023-11-28 17:20:07 +00:00

crypto.c

apparmor: Return directly after a failed kzalloc() in two functions

2023-07-06 10:58:49 -07:00

domain.c

apparmor: pass cred through to audit info.

2023-11-28 17:20:07 +00:00

file.c

apparmor: pass cred through to audit info.

2023-11-28 17:20:07 +00:00

ipc.c

apparmor: pass cred through to audit info.

2023-11-28 17:20:07 +00:00

Kconfig

…

label.c

…

lib.c

apparmor: fix possible memory leak in unpack_trans_table

2024-01-25 15:35:54 -08:00

lsm.c

apparmor: Fix ref count leak in task_kill

2024-01-25 15:35:54 -08:00

Makefile

…

match.c

…

mount.c

apparmor: Fix move_mount mediation by detecting if source is detached

2024-01-10 17:16:52 +01:00

net.c

apparmor: pass cred through to audit info.

2023-11-28 17:20:07 +00:00

nulldfa.in

…

path.c

…

policy_compat.c

Merge tag 'apparmor-pr-2023-07-06' of git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor

2023-07-07 09:55:31 -07:00

policy_ns.c

…

policy_unpack_test.c

apparmor: fix use of strcpy in policy_unpack_test

2023-07-06 10:58:49 -07:00

policy_unpack.c

apparmor: use kvfree_sensitive to free data->data

2024-08-03 08:54:16 +02:00

policy.c

apparmor: use kvfree_sensitive to free data->data

2024-08-03 08:54:16 +02:00

procattr.c

…

resource.c

apparmor: pass cred through to audit info.

2023-11-28 17:20:07 +00:00

secid.c

…

stacksplitdfa.in

…

task.c

apparmor: pass cred through to audit info.

2023-11-28 17:20:07 +00:00