Greg Kroah-Hartman 0af184bb9f fix prctl privilege escalation and suid_dumpable (CVE-2006-2451) ...

Based on a patch from Ernie Petrides

During security research, Red Hat discovered a behavioral flaw in core
dump handling. A local user could create a program that would cause a
core file to be dumped into a directory they would not normally have
permissions to write to. This could lead to a denial of service (disk
consumption), or allow the local user to gain root privileges.

Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

2006-07-06 13:02:05 -07:00

..

irq

[PATCH] request_irq(): remove warnings from irq probing

2006-04-28 08:33:46 -07:00

power

[PATCH] off-by-1 in kernel/power/main.c

2006-04-28 08:33:46 -07:00

.gitignore

…

acct.c

[PATCH] Fix pacct bug in multithreading case.

2006-03-31 12:18:54 -08:00

audit.c

[PATCH] More user space subject labels

2006-05-01 06:10:01 -04:00

audit.h

[PATCH] support for context based audit filtering, part 2

2006-05-01 06:09:36 -04:00

auditfilter.c

[PATCH] More user space subject labels

2006-05-01 06:10:01 -04:00

auditsc.c

[PATCH] Audit Filter Performance

2006-05-01 06:10:07 -04:00

capability.c

[PATCH] refactor capable() to one implementation, add __capable() helper

2006-03-25 08:22:56 -08:00

compat.c

[PATCH] lightweight robust futexes: compat

2006-03-27 08:44:49 -08:00

configs.c

…

cpu.c

[PATCH] Notifier chain update: API changes

2006-03-27 08:44:50 -08:00

cpuset.c

[PATCH] cpuset: might_sleep_if check in cpuset_zones_allowed

2006-05-21 12:59:18 -07:00

dma.c

…

exec_domain.c

[PATCH] Fix module refcount leak in __set_personality()

2006-03-24 07:33:30 -08:00

exit.c

[PATCH] Link error when futexes are disabled on 64bit architectures

2006-06-29 17:17:17 -07:00

extable.c

[PATCH] symbol_put_addr() locks kernel

2006-05-15 11:20:55 -07:00

fork.c

[PATCH] move call of audit_free() into do_exit()

2006-05-01 06:06:13 -04:00

futex_compat.c

[PATCH] futex: check and validate timevals

2006-03-31 12:18:59 -08:00

futex.c

[PATCH] futex: check and validate timevals

2006-03-31 12:18:59 -08:00

hrtimer.c

[PATCH] hrtimer: export symbols

2006-05-31 16:27:11 -07:00

intermodule.c

…

itimer.c

[PATCH] hrtimers: remove data field

2006-03-26 08:57:03 -08:00

kallsyms.c

…

Kconfig.hz

…

Kconfig.preempt

…

kexec.c

…

kfifo.c

…

kmod.c

[PATCH] wait_for_helper: trivial style cleanup

2006-03-28 18:36:41 -08:00

kprobes.c

[PATCH] kprobes: NULL out non-relevant fields in struct kretprobe

2006-04-20 07:54:03 -07:00

ksysfs.c

[PATCH] fix build error if CONFIG_SYSFS=n

2006-03-24 07:33:31 -08:00

kthread.c

[PATCH] find_task_by_pid() needs tasklist_lock

2006-03-25 08:22:57 -08:00

Makefile

[PATCH] lightweight robust futexes: compat

2006-03-27 08:44:49 -08:00

module.c

[PATCH] symbol_put_addr() locks kernel

2006-05-15 11:20:55 -07:00

mutex-debug.c

…

mutex-debug.h

…

mutex.c

…

mutex.h

…

panic.c

[PATCH] the scheduled unexport of panic_timeout

2006-04-11 06:18:40 -07:00

params.c

[PATCH] Change dash2underscore() return value to char

2006-03-28 09:16:03 -08:00

pid.c

[PATCH] pidhash: Refactor the pid hash table

2006-03-31 12:19:00 -08:00

posix-cpu-timers.c

[PATCH] arm_timer: remove a racy and obsolete PF_EXITING check

2006-06-17 10:52:13 -07:00

posix-timers.c

[PATCH] hrtimers: remove data field

2006-03-26 08:57:03 -08:00

printk.c

BUG_ON() Conversion in kernel/printk.c

2006-04-01 01:21:17 +02:00

profile.c

[PATCH] Remove __devinit and __cpuinit from notifier_call definitions

2006-04-26 08:30:03 -07:00

ptrace.c

ptrace_attach: fix possible deadlock schenario with irqs

2006-05-11 11:08:49 -07:00

rcupdate.c

[PATCH] RCU: introduce rcu_needs_cpu() interface

2006-05-15 11:20:55 -07:00

rcutorture.c

[PATCH] for_each_possible_cpu: fixes for generic part

2006-03-28 09:16:05 -08:00

relay.c

…

resource.c

…

sched.c

Revert "[PATCH] sched: fix interactive task starvation"

2006-05-21 18:54:09 -07:00

seccomp.c

…

signal.c

[PATCH] fix non-leader exec under ptrace

2006-04-14 08:59:13 -07:00

softirq.c

[PATCH] Remove __devinit and __cpuinit from notifier_call definitions

2006-04-26 08:30:03 -07:00

softlockup.c

[PATCH] Remove __devinit and __cpuinit from notifier_call definitions

2006-04-26 08:30:03 -07:00

spinlock.c

…

stop_machine.c

…

sys_ni.c

[PATCH] frv: define MMU mode specific syscalls as 'cond_syscall' and clean up unneeded macros

2006-04-11 06:18:33 -07:00

sys.c

fix prctl privilege escalation and suid_dumpable (CVE-2006-2451)

2006-07-06 13:02:05 -07:00

sysctl.c

[PATCH] Range checking in do_proc_dointvec_(userhz_)jiffies_conv

2006-03-24 07:33:20 -08:00

time.c

Fix comments: s/granuality/granularity/

2006-04-01 01:41:22 +02:00

timer.c

[PATCH] Fix a NO_IDLE_HZ timer bug

2006-05-21 12:59:21 -07:00

uid16.c

[PATCH] Add more prevent_tail_call()

2006-04-19 16:27:18 -07:00

user.c

[PATCH] free_uid() locking improvement

2006-03-24 07:33:20 -08:00

wait.c

…

workqueue.c

[PATCH] Remove __devinit and __cpuinit from notifier_call definitions

2006-04-26 08:30:03 -07:00