GIT PULL] integrity: subsystem fixes for v7.4

From: Mimi Zohar

Date: Mon Oct 19 2026 - 15:55:27 EST


Hi Linus,

A cleanup and two bug fixes:

- Update ima_audit_msg() to report errno directly, revert making it a wrapper
for ima_audit_message(), and remove ima_audit_message().

Two bug fixes when carrying the IMA measurement list across kexec:
- Restore the number of violations in the IMA measurement list.
- Reject restoring IMA measurement list record(s) beyond the expected buffer
size (out-of-bounds).

thanks,

Mimi

The following changes since commit df2908090cda368b01ff43709f51890076c56157:

Linux 7.3-rc2 (2026-09-06 15:07:20 -0700)

are available in the Git repository at:

https://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity.git/ tags/integrity-v7.4

for you to fetch changes up to ceb24c7052cc4649e3b52a51a7cca7dfe4896cec:

ima: reject a kexec buffer whose declared size exceeds the buffer (2026-10-16 10:54:53 -0400)

----------------------------------------------------------------
integrity-v7.4

----------------------------------------------------------------
Enrico Bravi (1):
ima: recover number of violations after kexec

Fabrice Derepas (1):
ima: reject a kexec buffer whose declared size exceeds the buffer

Frederick Lawler (2):
integrity: Report error code in integrity_audit_msg() call sites
integrity: Replace integrity_audit_message() with integrity_audit_msg()

security/integrity/evm/evm_main.c | 9 +++++----
security/integrity/ima/ima_api.c | 8 ++++----
security/integrity/ima/ima_appraise.c | 6 +++---
security/integrity/ima/ima_fs.c | 7 ++++---
security/integrity/ima/ima_init.c | 2 +-
security/integrity/ima/ima_main.c | 13 +++++++------
security/integrity/ima/ima_policy.c | 11 ++++++-----
security/integrity/ima/ima_queue.c | 2 +-
security/integrity/ima/ima_queue_keys.c | 8 ++++----
security/integrity/ima/ima_template.c | 12 ++++++++++++
security/integrity/ima/ima_template_lib.c | 2 +-
security/integrity/integrity.h | 18 +++---------------
security/integrity/integrity_audit.c | 12 ++----------
13 files changed, 53 insertions(+), 57 deletions(-)