projects / platform / kernel / linux-rpi.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: a959a97) | patch
dump_common_audit_data(): fix racy accesses to ->d_name
authorAl Viro <viro@zeniv.linux.org.uk>
Tue, 5 Jan 2021 19:43:46 +0000 (14:43 -0500)
committerAl Viro <viro@zeniv.linux.org.uk>
Sat, 16 Jan 2021 20:11:35 +0000 (15:11 -0500)
commitd36a1dd9f77ae1e72da48f4123ed35627848507d
tree7252b0d4174a46d062a76fea648fdde2fd992f9atree | snapshot
parenta959a9782fa87669feeed095ced5d78181a7c02dcommit | diff
dump_common_audit_data(): fix racy accesses to ->d_name

We are not guaranteed the locking environment that would prevent
dentry getting renamed right under us.  And it's possible for
old long name to be freed after rename, leading to UAF here.

Cc: stable@kernel.org # v2.6.2+
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
security/lsm_audit.c diff | blob | history
Domain: System / Kernel;