linux-kernel - [git pull] vfs.git fixes

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20200126182517.GO23230@ZenIV.linux.org.uk>
Date:   Sun, 26 Jan 2020 18:25:17 +0000
From:   Al Viro <viro@...iv.linux.org.uk>
To:     Linus Torvalds <torvalds@...ux-foundation.org>
Cc:     linux-fsdevel@...r.kernel.org, linux-kernel@...r.kernel.org
Subject: [git pull] vfs.git fixes

	Fixes a use-after-free in do_last() handling of sysctl_protected_... checks.
UAF normally doesn't happen there, but race with rename() and it becomes possible.

The following changes since commit 508c8772760d4ef9c1a044519b564710c3684fc5:

  fix autofs regression caused by follow_managed() changes (2020-01-15 01:36:46 -0500)

are available in the git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs.git fixes

for you to fetch changes up to d0cb50185ae942b03c4327be322055d622dc79f6:

  do_last(): fetch directory ->i_mode and ->i_uid before it's too late (2020-01-26 09:31:07 -0500)

----------------------------------------------------------------
Al Viro (1):
      do_last(): fetch directory ->i_mode and ->i_uid before it's too late

 fs/namei.c | 17 ++++++++++-------
 1 file changed, 10 insertions(+), 7 deletions(-)