]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
projects / thirdparty / kernel / stable.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: ae74a22) | patch
fs: Add a missing permission check to do_umount
authorAndy Lutomirski <luto@amacapital.net>
Wed, 8 Oct 2014 19:32:47 +0000 (12:32 -0700)
committerJiri Slaby <jslaby@suse.cz>
Fri, 17 Oct 2014 07:43:21 +0000 (09:43 +0200)
commit8d9c8c3980a85d79db13c5ce4bb118fef32d4f50
tree3a6e2d463b2d344617be486d0c238b1cd006c9e1tree
parentae74a22cb5024a22753c3bb5c7d4036db1929fc0commit | diff
fs: Add a missing permission check to do_umount

commit a1480dcc3c706e309a88884723446f2e84fedd5b upstream.

Accessing do_remount_sb should require global CAP_SYS_ADMIN, but
only one of the two call sites was appropriately protected.

Fixes CVE-2014-7975.

Signed-off-by: Andy Lutomirski <luto@amacapital.net>
Signed-off-by: Jiri Slaby <jslaby@suse.cz>
fs/namespace.c diff | blob | blame | history
Mirror https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git