linux-kernel - [GIT PULL] execve fixes for v6.11-rc4

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <202408131327.15CD984B5@keescook>
Date: Tue, 13 Aug 2024 13:27:44 -0700
From: Kees Cook <kees@...nel.org>
To: Linus Torvalds <torvalds@...ux-foundation.org>
Cc: linux-kernel@...r.kernel.org, Alexander Viro <viro@...iv.linux.org.uk>,
	Christian Brauner <brauner@...nel.org>,
	Damien Le Moal <dlemoal@...nel.org>,
	Eric Biederman <ebiederm@...ssion.com>,
	Greg Ungerer <gerg@...ux-m68k.org>, Kees Cook <kees@...nel.org>,
	Marco Vanotti <mvanotti@...gle.com>,
	Stefan O'Rear <sorear@...tmail.com>
Subject: [GIT PULL] execve fixes for v6.11-rc4

Hi Linus,

Please pull these execve fixes for v6.11-rc4.

Thanks!

-Kees

The following changes since commit de9c2c66ad8e787abec7c9d7eff4f8c3cdd28aed:

  Linux 6.11-rc2 (2024-08-04 13:50:53 -0700)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git tags/execve-v6.11-rc4

for you to fetch changes up to f50733b45d865f91db90919f8311e2127ce5a0cb:

  exec: Fix ToCToU between perm check and set-uid/gid usage (2024-08-13 13:24:29 -0700)

----------------------------------------------------------------
execve fixes for v6.11-rc4

- binfmt_flat: Fix corruption when not offsetting data start

- exec: Fix ToCToU between perm check and set-uid/gid usage

----------------------------------------------------------------
Kees Cook (2):
      binfmt_flat: Fix corruption when not offsetting data start
      exec: Fix ToCToU between perm check and set-uid/gid usage

 fs/binfmt_flat.c | 4 +++-
 fs/exec.c        | 8 +++++++-
 2 files changed, 10 insertions(+), 2 deletions(-)

-- 
Kees Cook