Description
In the Linux kernel, the following vulnerability has been resolved: smack: fix bug: unprivileged task can create labels If an unprivileged task is allowed to relabel itself (/smack/relabel-self is not empty), it can freely create new labels by writing their names into own /proc/PID/attr/smack/current This occurs because do_setattr() imports the provided label in advance, before checking "relabel-self" list. This change ensures that the "relabel-self" list is checked before importing the label.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
38416e53936ecf896948fdeffc36b76979117952 to < c80173233014a360c13fa5cc79d36bfe6e53a8edaffected38416e53936ecf896948fdeffc36b76979117952 to < 6b1e45e13546c9ea0b1d99097993ac0aafae90b1affected38416e53936ecf896948fdeffc36b76979117952 to < 4a7a7621619a366712fb9cefcb6e69f956c247ceaffected38416e53936ecf896948fdeffc36b76979117952 to < f8fd5491100f920847a3338d5fba22db19c72773affected38416e53936ecf896948fdeffc36b76979117952 to < ac9fce2efabad37c338aac86fbe100f77a080e59affected38416e53936ecf896948fdeffc36b76979117952 to < 64aa81250171b6bb6803e97ea7a5d73bfa061f6eaffected38416e53936ecf896948fdeffc36b76979117952 to < 60e8d49989410a7ade60f5dadfcd979c117d05c0affected38416e53936ecf896948fdeffc36b76979117952 to < c147e13ea7fe9f118f8c9ba5e96cbd644b00d6b3affected
Linux Linux
Default version status: affected
4.4affected0 to < 4.4unaffected5.10.248 to ≤ 5.10.*unaffected5.15.198 to ≤ 5.15.*unaffected6.1.160 to ≤ 6.1.*unaffected6.6.120 to ≤ 6.6.*unaffected6.12.63 to ≤ 6.12.*unaffected6.17.13 to ≤ 6.17.*unaffected6.18.2 to ≤ 6.18.*unaffected6.19 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/c80173233014a360c13fa5cc79d36bfe6e53a8ed ↗
- https://git.kernel.org/stable/c/6b1e45e13546c9ea0b1d99097993ac0aafae90b1 ↗
- https://git.kernel.org/stable/c/4a7a7621619a366712fb9cefcb6e69f956c247ce ↗
- https://git.kernel.org/stable/c/f8fd5491100f920847a3338d5fba22db19c72773 ↗
- https://git.kernel.org/stable/c/ac9fce2efabad37c338aac86fbe100f77a080e59 ↗
- https://git.kernel.org/stable/c/64aa81250171b6bb6803e97ea7a5d73bfa061f6e ↗
- https://git.kernel.org/stable/c/60e8d49989410a7ade60f5dadfcd979c117d05c0 ↗
- https://git.kernel.org/stable/c/c147e13ea7fe9f118f8c9ba5e96cbd644b00d6b3 ↗