]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
projects / thirdparty / kernel / stable.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 6ebe2d3) | patch
fs: Add a missing permission check to do_umount
authorAndy Lutomirski <luto@amacapital.net>
Wed, 8 Oct 2014 19:32:47 +0000 (12:32 -0700)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 30 Oct 2014 16:38:19 +0000 (09:38 -0700)
commitdc3980ea4ad9d8d0b63b3cde732c9b95750208ce
tree7cdea2fb14b5c9049a36d2fce092635bacb8691ctree
parent6ebe2d33e2867223e6a35afc3ba547aee5a3e196commit | diff
fs: Add a missing permission check to do_umount

commit a1480dcc3c706e309a88884723446f2e84fedd5b upstream.

Accessing do_remount_sb should require global CAP_SYS_ADMIN, but
only one of the two call sites was appropriately protected.

Fixes CVE-2014-7975.

Signed-off-by: Andy Lutomirski <luto@amacapital.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
fs/namespace.c diff | blob | blame | history
Mirror https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git