]> git.ipfire.org Git - thirdparty/util-linux.git/commit
libmount: fix UID check for FUSE umount [CVE-2021-3995]
authorKarel Zak <kzak@redhat.com>
Wed, 24 Nov 2021 12:53:25 +0000 (13:53 +0100)
committerKarel Zak <kzak@redhat.com>
Mon, 24 Jan 2022 11:05:16 +0000 (12:05 +0100)
commit57202f5713afa2af20ffbb6ab5331481d0396f8d
tree81f64d46b968ad7f987096e02e8b7f2ba24e3940
parentf5ea9eee5e45f9349e67506e3f7c81d8087c1cde
libmount: fix UID check for FUSE umount [CVE-2021-3995]

Improper UID check allows an unprivileged user to unmount FUSE
filesystems of users with similar UID.

Signed-off-by: Karel Zak <kzak@redhat.com>
libmount/src/context_umount.c
libmount/src/mountP.h
libmount/src/optstr.c