Ali Ahmet MEMISandGreg Kroah-Hartman 905493a633 tools/power/x86/intel-speed-select: Harden daemon pidfile open ...

commit 607af438e6 upstream.

Avoid symlink-based pidfile clobbering by opening the pidfile with
O_NOFOLLOW and validating it with fstat() before locking/writing.

The daemon currently uses a fixed pidfile path under /tmp. A local
unprivileged user can pre-create a symlink at that path and cause a
root-run daemon instance to write into an attacker-chosen file.

Fixes: 7fd786dfbd ("tools/power/x86/intel-speed-select: OOB daemon mode")
Signed-off-by: Ali Ahmet MEMIS <dev@unknownbbqr.xyz>
Signed-off-by: Srinivas Pandruvada <srinivas.pandruvada@linux.intel.com>
Cc: stable@kernel.org
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2026-07-24 15:55:00 +02:00

..

acpi

…

cpupower

tools/power cpupower: Reset errno before strtoull()

2026-03-04 07:20:13 -05:00

pm-graph

…

x86

tools/power/x86/intel-speed-select: Harden daemon pidfile open

2026-07-24 15:55:00 +02:00