security/lsm_audit.c · linux-5.10.y · Eclipse Projects / Oniro Core / linux

4 years ago

dump_common_audit_data(): fix racy accesses to ->d_name · a3fddad7

Al Viro authored 4 years ago


commit d36a1dd9 upstream.

We are not guaranteed the locking environment that would prevent
dentry getting renamed right under us.  And it's possible for
old long name to be freed after rename, leading to UAF here.

Cc: stable@kernel.org # v2.6.2+
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

a3fddad7

History

dump_common_audit_data(): fix racy accesses to ->d_name

Al Viro authored 4 years ago


commit d36a1dd9 upstream.

We are not guaranteed the locking environment that would prevent
dentry getting renamed right under us.  And it's possible for
old long name to be freed after rename, leading to UAF here.

Cc: stable@kernel.org # v2.6.2+
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

Code owners

Assign users and groups as approvers for specific file changes. Learn more.