Kees Cook e08323f75b Yama: Check for pid death before checking ancestry ... commit 9474f4e7cd71a633fa1ef93b7daefd44bbdfd482 upstream. It's possible that a pid has died before we take the rcu lock, in which case we can't walk the ancestry list as it may be detached. Instead, check for death first before doing the walk. Reported-by: syzbot+a9ac39bf55329e206219@syzkaller.appspotmail.com Fixes: 2d514487fa ("security: Yama LSM") Cc: stable@vger.kernel.org Suggested-by: Oleg Nesterov <oleg@redhat.com> Signed-off-by: Kees Cook <keescook@chromium.org> Signed-off-by: James Morris <james.morris@microsoft.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2019-01-26 09:42:50 +01:00
..
apparmor	apparmor: Make path_max parameter readonly	2018-03-22 09:23:24 +01:00
integrity	ima: fix showing large 'violations' or 'runtime_measurements_count'	2018-11-21 09:27:35 +01:00
keys	KEYS: put keyring if install_session_keyring_to_cred() fails	2018-11-10 07:41:34 -08:00
selinux	selinux: use GFP_NOWAIT in the AVC kmem_caches	2018-09-19 22:48:56 +02:00
smack	Smack: Mark inode instant in smack_task_to_inode	2018-08-24 13:26:56 +02:00
tomoyo	mm: replace get_user_pages() write/force parameters with gup_flags	2018-12-17 21:55:16 +01:00
yama	Yama: Check for pid death before checking ancestry	2019-01-26 09:42:50 +01:00
commoncap.c	ptrace: use fsuid, fsgid, effective creds for fs access checks	2016-02-25 12:01:16 -08:00
device_cgroup.c
inode.c
Kconfig	KPTI: Rename to PAGE_TABLE_ISOLATION	2018-01-05 15:44:26 +01:00
lsm_audit.c
Makefile
min_addr.c
security.c