selinux: add __GFP_NOWARN to hashtab_init() allocations
authorPaul Moore <paul@paul-moore.com>
Wed, 18 Jun 2025 16:17:33 +0000 (12:17 -0400)
committerPaul Moore <paul@paul-moore.com>
Thu, 19 Jun 2025 21:24:57 +0000 (17:24 -0400)
commit9ab71d9204c32a9814d38528d066fdf6fa128604
tree8d860b419c813ccfedd3a348e514c86b36d26cd4
parent951b2de06a0bd64930949c7d3bd5a113cdf24189
selinux: add __GFP_NOWARN to hashtab_init() allocations

As reported by syzbot, hashtab_init() can be affected by abnormally
large policy loads which would cause the kernel's allocator to emit
a warning in some configurations.  Since the SELinux hashtab_init()
code handles the case where the allocation fails, due to a large
request or some other reason, we can safely add the __GFP_NOWARN flag
to squelch these abnormally large allocation warnings.

Reported-by: syzbot+bc2c99c2929c3d219fb3@syzkaller.appspotmail.com
Tested-by: syzbot+bc2c99c2929c3d219fb3@syzkaller.appspotmail.com
Signed-off-by: Paul Moore <paul@paul-moore.com>
security/selinux/ss/hashtab.c