)]}'
{
  "commit": "43a1e3744548e6fd85873e6fb43e293eb4010694",
  "tree": "1718e70a9e68a7b3a3ba412f238df2365ffa6cb8",
  "parents": [
    "eb3f4b7426cfd2b79d65b7d37155480b32259a11"
  ],
  "author": {
    "name": "Linus Torvalds",
    "email": "torvalds@linux-foundation.org",
    "time": "Thu May 28 11:45:41 2026 -0700"
  },
  "committer": {
    "name": "Linus Torvalds",
    "email": "torvalds@linux-foundation.org",
    "time": "Thu May 28 11:45:41 2026 -0700"
  },
  "message": "security/keys: fix missed RCU read section on lookup\n\nNicholas Carlini reports that the keyring code calls assoc_array_find()\nin find_key_to_update() without holding the RCU read lock, while the\nassoc_array_gc() code really is designed around removing the node from\nthe tree and then freeing it after an RCU grace-period.\n\nThe regular key handling doesn\u0027t see this because holding the keyring\nsemaphore hides any lifetime issues, but the persistent key handling\nuses a different model.\n\nInstead of extending the keyring locking, just do the simple RCU locking\nthat the assoc_array was designed for.\n\nReported-by: Nicholas Carlini \u003cnpc@anthropic.com\u003e\nCc: David Howells \u003cdhowells@redhat.com\u003e\nCc: Jarkko Sakkinen \u003cjarkko@kernel.org\u003e\nCc: Paul Moore \u003cpaul@paul-moore.com\u003e\nCc: James Morris James Morris \u003cjmorris@namei.org\u003e\nCc: Serge E. Hallyn \u003cserge@hallyn.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "b39038f7dd3173a2cfa4ef34646ecfb7e8f7f013",
      "old_mode": 33188,
      "old_path": "security/keys/keyring.c",
      "new_id": "5a9887d6b7be3c5e3a98b4dd8427a2c8552ed8a0",
      "new_mode": 33188,
      "new_path": "security/keys/keyring.c"
    }
  ]
}