Andrew Lutomirski eac664d283 net: Fix ns_capable check in sock_diag_put_filterinfo ...

[ Upstream commit 78541c1dc6 ]

The caller needs capabilities on the namespace being queried, not on
their own namespace.  This is a security bug, although it likely has
only a minor impact.

Cc: stable@vger.kernel.org
Signed-off-by: Andy Lutomirski <luto@amacapital.net>
Acked-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2014-05-30 21:52:15 -07:00

..

af_packet.c

packet: fix send path when running with proto == 0

2014-01-15 15:28:46 -08:00

diag.c

net: Fix ns_capable check in sock_diag_put_filterinfo

2014-05-30 21:52:15 -07:00

internal.h

packet: fix use after free race in send path when dev is released

2013-12-08 07:29:26 -08:00

Kconfig

packet: Diag core and basic socket info dumping

2012-08-14 16:56:33 -07:00

Makefile

packet: Diag core and basic socket info dumping

2012-08-14 16:56:33 -07:00