diff options
| author | David Gstir <[email protected]> | 2024-11-13 21:27:54 +0000 |
|---|---|---|
| committer | Jarkko Sakkinen <[email protected]> | 2025-01-21 09:25:23 +0000 |
| commit | e8d9fab39d1f87b52932646b2f1e7877aa3fc0f4 (patch) | |
| tree | 6a7fb188d34261e867683822e24bd1f6d9afd884 /net/switchdev/switchdev.c | |
| parent | keys: drop shadowing dead prototype (diff) | |
| download | kernel-e8d9fab39d1f87b52932646b2f1e7877aa3fc0f4.tar.gz kernel-e8d9fab39d1f87b52932646b2f1e7877aa3fc0f4.zip | |
KEYS: trusted: dcp: fix improper sg use with CONFIG_VMAP_STACK=y
With vmalloc stack addresses enabled (CONFIG_VMAP_STACK=y) DCP trusted
keys can crash during en- and decryption of the blob encryption key via
the DCP crypto driver. This is caused by improperly using sg_init_one()
with vmalloc'd stack buffers (plain_key_blob).
Fix this by always using kmalloc() for buffers we give to the DCP crypto
driver.
Cc: [email protected] # v6.10+
Fixes: 0e28bf61a5f9 ("KEYS: trusted: dcp: fix leak of blob encryption key")
Signed-off-by: David Gstir <[email protected]>
Reviewed-by: Jarkko Sakkinen <[email protected]>
Signed-off-by: Jarkko Sakkinen <[email protected]>
Diffstat (limited to 'net/switchdev/switchdev.c')
0 files changed, 0 insertions, 0 deletions