linux

iv/linux

Files

Eric Biggers 174a74dbca KEYS: fix keyctl_set_reqkey_keyring() to not leak thread keyrings

commit c9f838d104 upstream.

This fixes CVE-2017-7472.

Running the following program as an unprivileged user exhausts kernel
memory by leaking thread keyrings:

	#include <keyutils.h>

	int main()
	{
		for (;;)
			keyctl_set_reqkey_keyring(KEY_REQKEY_DEFL_THREAD_KEYRING);
	}

Fix it by only creating a new thread keyring if there wasn't one before.
To make things more consistent, make install_thread_keyring_to_cred()
and install_process_keyring_to_cred() both return 0 if the corresponding
keyring is already present.

Fixes: d84f4f992c ("CRED: Inaugurate COW credentials")
Signed-off-by: Eric Biggers <ebiggers@google.com>
Signed-off-by: David Howells <dhowells@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2017-04-27 09:10:37 +02:00

apparmor

apparmor: fix change_hat not finding hat after policy replacement

2016-11-21 18:01:28 +11:00

integrity

ima: fix ima_d_path() possible race with rename

2017-03-12 06:41:44 +01:00

keys

KEYS: fix keyctl_set_reqkey_keyring() to not leak thread keyrings

2017-04-27 09:10:37 +02:00

loadpin

LSM: LoadPin: provide enablement CONFIG