FPII-2318: Elevation of privilege vulnerability in kernel networking subsystem CVE-2013-7446 A-29119002
There is a potential use-after-free vulnerability in the net/unix/af_unix.c file, in the Linux kernel
before 4.3.3, that allows local users to bypass intended AF_UNIX socket permissions via crafted epoll_ctl calls.
The fix is designed to remove the second call to sock_poll_wait in the unix_dgram_poll function to prevent the
potential use-after-free vulnerability.
Change-Id: I5fc989df4392e585fed6ba9ed6a7e39d98851ab5
2 files changed