diff options
| author |   GhantaKrishnamurthy MohanKrishna <mohan.krishna.ghanta.krishnamurthy@ericsson.com> | 2018-04-04 14:49:47 +0200 |
|---|---|---|
| committer |   David S. Miller <davem@davemloft.net> | 2018-04-04 11:54:35 -0400 |
| commit | 4b2e6877b8793b60abb75c15abaaa4377807a358 (patch) | |
| tree | fd1b4ff1a0f5717a7b521812e871ed4537b157de /net/ipv4/ip_fragment.c | |
| parent | net: avoid unneeded atomic operation in ip*_append_data() (diff) | |
| download | linux-dev-4b2e6877b8793b60abb75c15abaaa4377807a358.tar.xz linux-dev-4b2e6877b8793b60abb75c15abaaa4377807a358.zip | |
tipc: Fix namespace violation in tipc_sk_fill_sock_diag
To fetch UID info for socket diagnostics, we determine the
namespace of user context using tipc socket instance. This
may cause namespace violation, as the kernel will remap based
on UID.
We fix this by fetching namespace info using the calling userspace
netlink socket.
Fixes: c30b70deb5f4 (tipc: implement socket diagnostics for AF_TIPC)
Reported-by: syzbot+326e587eff1074657718@syzkaller.appspotmail.com
Acked-by: Jon Maloy <jon.maloy@ericsson.com>
Signed-off-by: GhantaKrishnamurthy MohanKrishna <mohan.krishna.ghanta.krishnamurthy@ericsson.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to '')
0 files changed, 0 insertions, 0 deletions