)]}'
{
  "commit": "28d9fb16dee83df98fb90bef1a3f5b2f70cb8304",
  "tree": "d1c5608e455159c98abd78e803299b144c26ece1",
  "parents": [
    "1c46150df08465981d40e06f1eb7bb3cc99da8b9"
  ],
  "author": {
    "name": "Jarkko Sakkinen",
    "email": "jarkko@kernel.org",
    "time": "Mon Oct 19 17:56:23 2026 +0300"
  },
  "committer": {
    "name": "Jarkko Sakkinen",
    "email": "jarkko@kernel.org",
    "time": "Thu Nov 05 23:21:05 2026 +0200"
  },
  "message": "KEYS: Reject keyring creation with overridden credentials\n\nIf the current task is running with overridden credentials calling\ncommit_creds() is forbidden and triggers a BUG_ON().\n\nReject keyring creation with -EPERM when credentials are overridden.\n\nCc: stable@vger.kernel.org # v5.10+\nSuggested-by: Jann Horn \u003cjannh@google.com\u003e\nCloses: https://lore.kernel.org/keyrings/CAG48ez0XjVSR\u003dM--UBauTm8sJuc+ZbhKzaPa3a6wrSVHyoKevw@mail.gmail.com/\nSigned-off-by: Jarkko Sakkinen \u003cjarkko@kernel.org\u003e\n---\nv3:\nCollapse and open-code cred_overridden() to the entry point of lookup_user_key() (David).\nv2:\n- Added mandatory tags.\n- No code changes.\n- Link: https://lore.kernel.org/keyrings/20261019145624.309790-2-jarkko@kernel.org/\n Documentation/security/keys/core.rst | 3 ++-\n security/keys/process_keys.c         | 6 +++++-\n 2 files changed, 7 insertions(+), 2 deletions(-)\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "e3a215e55f81cf677edf623fe389f6f80b3862c5",
      "old_mode": 33188,
      "old_path": "Documentation/security/keys/core.rst",
      "new_id": "a60b2f725a0b3890831995034ddd716233863cd3",
      "new_mode": 33188,
      "new_path": "Documentation/security/keys/core.rst"
    },
    {
      "type": "modify",
      "old_id": "cdf03b8124d0dbdc92f923bfc105eaea5912c906",
      "old_mode": 33188,
      "old_path": "security/keys/process_keys.c",
      "new_id": "c878a5f8d47cadc92e7af12715468708de7261ce",
      "new_mode": 33188,
      "new_path": "security/keys/process_keys.c"
    }
  ]
}