Andrew Lutomirski 78541c1dc6 net: Fix ns_capable check in sock_diag_put_filterinfo ...

The caller needs capabilities on the namespace being queried, not on
their own namespace.  This is a security bug, although it likely has
only a minor impact.

Cc: stable@vger.kernel.org
Signed-off-by: Andy Lutomirski <luto@amacapital.net>
Acked-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2014-04-22 12:49:39 -04:00

..

af_packet.c

net: Fix use after free by removing length arg from sk_data_ready callbacks.

2014-04-11 16:15:36 -04:00

diag.c

net: Fix ns_capable check in sock_diag_put_filterinfo

2014-04-22 12:49:39 -04:00

internal.h

packet: use percpu mmap tx frame pending refcount

2014-01-16 16:17:12 -08:00

Kconfig

packet: Diag core and basic socket info dumping

2012-08-14 16:56:33 -07:00

Makefile

packet: Diag core and basic socket info dumping

2012-08-14 16:56:33 -07:00