averello/linux-stable-mirror
1
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git synced 2025-12-26 12:21:01 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
975c57504da1114551fdb3a91ed61dda7739613e
linux-stable-mirror/fs
History
Kees Cook bfb819ea20 proc: Check /proc/$pid/attr/ writes against file opener 
Fix another "confused deputy" weakness[1]. Writes to /proc/$pid/attr/
files need to check the opener credentials, since these fds do not
transition state across execve(). Without this, it is possible to
trick another process (which may have different credentials) to write
to its own /proc/$pid/attr/ files, leading to unexpected and possibly
exploitable behaviors.

[1] https://www.kernel.org/doc/html/latest/security/credentials.html?highlight=confused#open-file-credentials

Fixes: 1da177e4c3 ("Linux-2.6.12-rc2")
Cc: stable@vger.kernel.org
Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2021-05-25 10:24:41 -10:00
..
9p
Merge tag '9p-for-5.13-rc1' of git://github.com/martinetd/linux
2021-05-07 11:18:52 -07:00
adfs
…
affs
…
afs
afs: Fix fall-through warnings for Clang
2021-05-25 07:30:34 -10:00
autofs
…
befs
…
bfs
…
btrfs
Merge tag 'for-5.13-rc2-tag' of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux
2021-05-21 13:24:12 -10:00
cachefiles
fscache, cachefiles: Add alternate API to use kiocb for read/write to cache
2021-04-23 10:14:32 +01:00
ceph
Merge tag 'ceph-for-5.13-rc1' of git://github.com/ceph/ceph-client
2021-05-06 10:27:02 -07:00
cifs
Fix KASAN identified use-after-free issue.
2021-05-20 12:20:42 -05:00
coda
coda: fix reference counting in coda_file_mmap error path
2021-04-23 14:42:39 -07:00
configfs
treewide: remove editor modelines and cruft
2021-05-07 00:26:34 -07:00
cramfs
…
crypto
Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
2021-04-26 08:51:23 -07:00
debugfs
Merge tag 'sched-core-2021-04-28' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2021-04-28 13:33:57 -07:00
devpts
…
dlm
…
ecryptfs
fs: ecryptfs: remove BUG_ON from crypt_scatterlist
2021-05-13 18:32:26 +02:00
efivarfs
…
efs
…
erofs
erofs: fix 1 lcluster-sized pcluster for big pcluster
2021-05-13 15:58:46 +08:00
exfat
exfat: speed up iterate/lookup by fixing start point of traversing cluster chain
2021-04-27 20:45:07 +09:00
exportfs
…
ext2
Merge branch 'work.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2021-05-02 09:14:01 -07:00
ext4
Merge branch 'work.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2021-05-02 09:14:01 -07:00
f2fs
f2fs: return EINVAL for hole cases in swap file
2021-05-12 07:38:00 -07:00
fat
fs: fat: fix spelling typo of values
2021-05-07 00:26:34 -07:00
freevxfs
…
fscache
fscache, cachefiles: Add alternate API to use kiocb for read/write to cache
2021-04-23 10:14:32 +01:00
fuse
Merge branch 'work.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2021-05-02 09:14:01 -07:00
gfs2
mm: introduce and use mapping_empty()
2021-05-05 11:27:19 -07:00
hfs
…
hfsplus
hfsplus: prevent corruption in shrinking truncate
2021-05-14 19:41:32 -07:00
hostfs
Merge branch 'work.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2021-05-02 09:14:01 -07:00
hpfs
hpfs: replace one-element array with flexible-array member
2021-05-06 19:24:13 -07:00
hugetlbfs
userfaultfd: hugetlbfs: fix new flag usage in error path
2021-05-22 15:09:07 -10:00
iomap
mm/filemap: fix readahead return types
2021-05-14 19:41:32 -07:00
isofs
isofs: fix fall-through warnings for Clang
2021-05-06 19:24:13 -07:00
jbd2
…
jffs2
Merge tag 'for-linus-5.13-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/rw/ubifs
2021-05-04 18:08:40 -07:00
jfs
…
kernfs
…
lockd
…
minix
…
netfs
netfs: Make CONFIG_NETFS_SUPPORT auto-selected rather than manual
2021-05-25 13:48:04 +01:00
nfs
Merge tag 'nfs-for-5.13-1' of git://git.linux-nfs.org/projects/trondmy/linux-nfs
2021-05-07 11:23:41 -07:00
nfs_common
…
nfsd
Merge tag 'nfs-for-5.13-1' of git://git.linux-nfs.org/projects/trondmy/linux-nfs
2021-05-07 11:23:41 -07:00
nilfs2
Merge branch 'akpm' (patches from Andrew)
2021-05-07 00:34:51 -07:00
nls
…
notify
…
ntfs
…
ocfs2
treewide: remove editor modelines and cruft
2021-05-07 00:26:34 -07:00
omfs
…
openpromfs
…
orangefs
orangefs: leave files in the page cache for a few micro seconds at least
2021-04-29 08:06:05 -04:00
overlayfs
Merge tag 'ovl-update-5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/mszeredi/vfs
2021-04-30 15:17:08 -07:00
proc
proc: Check /proc/$pid/attr/ writes against file opener
2021-05-25 10:24:41 -10:00
pstore
Merge tag 'printk-for-5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/printk/linux
2021-04-27 18:09:44 -07:00
qnx4
…
qnx6
…
quota
quota: Use 'hlist_for_each_entry' to simplify code
2021-05-10 16:27:49 +02:00
ramfs
…
reiserfs
treewide: remove editor modelines and cruft
2021-05-07 00:26:34 -07:00
romfs
…
squashfs
squashfs: fix divide error in calculate_skip()
2021-05-14 19:41:32 -07:00
sysfs
…
sysv
…
tracefs
…
ubifs
Merge tag 'for-linus-5.13-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/rw/ubifs
2021-05-04 18:08:40 -07:00
udf
…
ufs
…
unicode
.gitignore: prefix local generated files with a slash
2021-05-02 00:43:35 +09:00
vboxsf
…
verity
fsverity: relax build time dependency on CRYPTO_SHA256
2021-04-22 17:31:32 +10:00
xfs
xfs: restore old ioctl definitions
2021-05-20 08:31:22 -07:00
zonefs
Merge tag 'fsnotify_for_v5.13-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-fs
2021-04-29 11:06:13 -07:00
aio.c
Revert "mremap: don't allow MREMAP_DONTUNMAP on special_mappings and aio"
2021-04-30 11:20:39 -07:00
anon_inodes.c
…
attr.c
…
bad_inode.c
…
binfmt_aout.c
…
binfmt_elf_fdpic.c
…
binfmt_elf.c
…
binfmt_em86.c
…
binfmt_flat.c
…
binfmt_misc.c
…
binfmt_script.c
…
block_dev.c
Merge tag 'block-5.13-2021-05-22' of git://git.kernel.dk/linux-block
2021-05-22 07:40:34 -10:00
buffer.c
Merge branch 'akpm' (patches from Andrew)
2021-05-05 13:50:15 -07:00
char_dev.c
…
compat_binfmt_elf.c
…
coredump.c
…
d_path.c
…
dax.c
Merge tag 'dax-fixes-5.13-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/nvdimm/nvdimm
2021-05-15 08:28:08 -07:00
dcache.c
…
direct-io.c
…
drop_caches.c
…
eventfd.c
…
eventpoll.c
fs/epoll: restore waking from ep_done_scan()
2021-05-06 19:24:13 -07:00
exec.c
…
fcntl.c
…
fhandle.c
…
file_table.c
…
file.c
Merge branch 'work.file' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2021-05-03 11:05:28 -07:00
filesystems.c
…
fs_context.c
…
fs_parser.c
vfs: fs_parser: clean up kernel-doc warnings
2021-04-30 11:20:35 -07:00
fs_pin.c
…
fs_struct.c
…
fs_types.c
…
fs-writeback.c
…
fsopen.c
…
init.c
…
inode.c
mm: remove nrexceptional from inode: remove BUG_ON
2021-05-05 11:27:20 -07:00
internal.h
…
io_uring.c
io_uring: fortify tctx/io_wq cleanup
2021-05-20 07:29:11 -06:00
io-wq.c
io-wq: remove unused io_wqe_need_worker() function
2021-04-20 11:24:22 -06:00
io-wq.h
…
ioctl.c
…
Kconfig
Merge tag 'nfs-for-5.13-1' of git://git.linux-nfs.org/projects/trondmy/linux-nfs
2021-05-07 11:23:41 -07:00
Kconfig.binfmt
…
kernel_read_file.c
…
libfs.c
…
locks.c
Merge tag 'nfsd-5.13-1' of git://git.kernel.org/pub/scm/linux/kernel/git/cel/linux
2021-05-05 13:44:19 -07:00
Makefile
netfs: Provide readahead and readpage netfs helpers
2021-04-23 10:14:32 +01:00
mbcache.c
…
mount.h
…
mpage.c
…
namei.c
Merge tag 'fs.idmapped.helpers.v5.13' of git://git.kernel.org/pub/scm/linux/kernel/git/brauner/linux
2021-04-27 12:49:42 -07:00
namespace.c
fs/mount_setattr: tighten permission checks
2021-05-12 14:13:16 +02:00
no-block.c
…
nsfs.c
…
open.c
…
pipe.c
…
pnode.c
…
pnode.h
…
posix_acl.c
…
proc_namespace.c
…
read_write.c
…
readdir.c
…
remap_range.c
…
select.c
…
seq_file.c
seq_file: Add a seq_bprintf function
2021-04-27 15:50:15 -07:00
signalfd.c
signalfd: Remove SIL_PERF_EVENT fields from signalfd_siginfo
2021-05-18 16:20:54 -05:00
splice.c
…
stack.c
…
stat.c
…
statfs.c
…
super.c
fs,security: Add sb_delete hook
2021-04-22 12:22:11 -07:00
sync.c
…
timerfd.c
…
userfaultfd.c
userfaultfd: add UFFDIO_CONTINUE ioctl
2021-05-05 11:27:22 -07:00
utimes.c
…
xattr.c
…