Re: [PATCH] keys: Fix UAF in key_put()

From: David Howells
Date: Tue Mar 18 2025 - 09:29:04 EST


Oleg Nesterov <oleg@xxxxxxxxxx> wrote:

> and since key_user_put() takes key_user_lock with irqs enabled,
> key_put()->key_user_put() doesn't look correct...

Meh. Yeah. I think it's time to do it the other way (i.e. putting keys to be
destroyed onto an explicit cleanup queue).

David