Re: [PATCH 00/12] Refactor and harden PLPKS code
From: Madhavan Srinivasan
Date: Sun Oct 11 2026 - 23:34:12 EST
On Wed, 23 Sep 2026 23:58:04 +0530, Srish Srinivasan wrote:
> This series contains fixes, hardening changes, and general cleanup for
> the PLPKS code. It addresses error handling and input validation issues,
> improves the cleanup of sensitive data, and prevents the wrapping_features
> sysfs attribute from being exposed when the key-wrapping interface is not
> supported.
>
> Srish Srinivasan (12):
> pseries/plpks: fix error handling in plpks_read_var()
> pseries/plpks: fix error code for wrapping key reads
> pseries/plpks: validate input to plpks_signed_update_var()
> pseries/plpks: clear sensitive PLPKS buffers
> pseries/plpks: clear sensitive buffers in wrapping operations
> pseries/plpks: clear signed update authentication buffer
> pseries/plpks: clear SED key data after use
> pseries/plpks: fix self-reference in plpks_var initializer
> pseries/plpks: hide wrapping_features when unsupported
> pseries/plpks: make narrowing conversions explicit
> pseries/plpks: rename the default wrapping key macro
> pseries/plpks: update PKS documentation and MAINTAINERS entry
>
> [...]
Applied to powerpc/next.
[01/12] pseries/plpks: fix error handling in plpks_read_var()
https://git.kernel.org/powerpc/c/d52a1659cb1718f93166ab8dd8621237e564a1c4
[02/12] pseries/plpks: fix error code for wrapping key reads
https://git.kernel.org/powerpc/c/0d0eafedcaf4939819d38ede6ad355ea37acd978
[03/12] pseries/plpks: validate input to plpks_signed_update_var()
https://git.kernel.org/powerpc/c/b59ff2d50b817eeec1259f357aae821c7834007f
[04/12] pseries/plpks: clear sensitive PLPKS buffers
https://git.kernel.org/powerpc/c/fe18716ff314eb32299048fd64242d31b4e852cf
[05/12] pseries/plpks: clear sensitive buffers in wrapping operations
https://git.kernel.org/powerpc/c/203695c109e37d8fe3531844218f75b98eef8e1f
[06/12] pseries/plpks: clear signed update authentication buffer
https://git.kernel.org/powerpc/c/63de55024e7c85975f4410380323edb05b186d7c
[07/12] pseries/plpks: clear SED key data after use
https://git.kernel.org/powerpc/c/217ba01e5b9096091acc2c1a3776cb3eb88c00ff
[08/12] pseries/plpks: fix self-reference in plpks_var initializer
https://git.kernel.org/powerpc/c/abcccecf4aa4b681f50eb7d7de93fc9a0a61c181
[09/12] pseries/plpks: hide wrapping_features when unsupported
https://git.kernel.org/powerpc/c/46b8411b2ee948b1786bc4af76e7feede0c2ddff
[10/12] pseries/plpks: make narrowing conversions explicit
https://git.kernel.org/powerpc/c/e0645be900a856a8ec462b1c47a4977ca19808e7
[11/12] pseries/plpks: rename the default wrapping key macro
https://git.kernel.org/powerpc/c/a2df535d9dd9029987fd9339e5fe668d53a459fa
[12/12] pseries/plpks: update PKS documentation and MAINTAINERS entry
https://git.kernel.org/powerpc/c/0499ab96527ac4c55be381d7417ff542d4ea24f6
cheers