| commit | 42a0cc3478584d4d63f68f2f5af021ddbea771fa | [log] [tgz] |
|---|---|---|
| author | Jann Horn <jannh@google.com> | Mon Jun 25 18:34:10 2018 +0200 |
| committer | Eric W. Biederman <ebiederm@xmission.com> | Sat Aug 11 02:05:53 2018 -0500 |
| tree | 8dc33625ea1c8488e01965f159ef3f597eba42cb | |
| parent | 5820f140edef111a9ea2ef414ab2428b8cb805b1 [diff] |
sys: don't hold uts_sem while accessing userspace memory
Holding uts_sem as a writer while accessing userspace memory allows a
namespace admin to stall all processes that attempt to take uts_sem.
Instead, move data through stack buffers and don't access userspace memory
while uts_sem is held.
Cc: stable@vger.kernel.org
Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2")
Signed-off-by: Jann Horn <jannh@google.com>
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>