Al Viro a3fddad7af dump_common_audit_data(): fix racy accesses to ->d_name ...

commit d36a1dd9f7 upstream.

We are not guaranteed the locking environment that would prevent
dentry getting renamed right under us.  And it's possible for
old long name to be freed after rename, leading to UAF here.

Cc: stable@kernel.org # v2.6.2+
Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2021-01-19 18:27:29 +01:00

11 KiB

Raw Blame History

View Raw