Gui-Dong HanandGreg Kroah-Hartman c7d8832519 KEYS: Use acquire when reading state in keyring search ...

[ Upstream commit c1201b37f6 ]

The negative-key race fix added release/acquire ordering for key use.

Publish payload before state; read state before payload.

keyring_search_iterator() still uses READ_ONCE() before match callbacks.
An asymmetric match callback calls asymmetric_key_ids(), which reads
key->payload.data[asym_key_ids].

Use key_read_state() there to complete that ordering.

Fixes: 363b02dab0 ("KEYS: Fix race between updating and finding a negative key")
Signed-off-by: Gui-Dong Han <hanguidong02@gmail.com>
Reviewed-by: Jarkko Sakkinen <jarkko@kernel.org>
Link: https://lore.kernel.org/r/20260529033406.20673-1-hanguidong02@gmail.com
Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2026-07-24 15:54:44 +02:00

..

encrypted-keys

…

trusted-keys

…

big_key.c

…

compat_dh.c

…

compat.c

…

dh.c

…

gc.c

…

internal.h

keys: Pin request_key_auth payload in instantiate paths

2026-07-04 13:41:31 +02:00

Kconfig

…

key.c

…

keyctl_pkey.c

KEYS: fix overflow in keyctl_pkey_params_get_2()

2026-07-04 13:41:31 +02:00

keyctl.c

keys: Pin request_key_auth payload in instantiate paths

2026-07-04 13:41:31 +02:00

keyring.c

KEYS: Use acquire when reading state in keyring search

2026-07-24 15:54:44 +02:00

Makefile

…

permission.c

…

persistent.c

…

proc.c

…

process_keys.c

…

request_key_auth.c

keys: Pin request_key_auth payload in instantiate paths

2026-07-04 13:41:31 +02:00

request_key.c

…

sysctl.c

…

user_defined.c

…