summaryrefslogtreecommitdiffstats
path: root/drivers/net
diff options
context:
space:
mode:
authorwilly tarreau <w@1wt.eu>2016-01-10 07:54:56 +0100
committerDavid S. Miller <davem@davemloft.net>2016-01-11 06:05:30 +0100
commit712f4aad406bb1ed67f3f98d04c044191f0ff593 (patch)
treeee2f45594b6acfc83a69988a914b9fe15d6e4367 /drivers/net
parentipv6: tcp: add rcu locking in tcp_v6_send_synack() (diff)
downloadlinux-712f4aad406bb1ed67f3f98d04c044191f0ff593.tar.xz
linux-712f4aad406bb1ed67f3f98d04c044191f0ff593.zip
unix: properly account for FDs passed over unix sockets
It is possible for a process to allocate and accumulate far more FDs than the process' limit by sending them over a unix socket then closing them to keep the process' fd count low. This change addresses this problem by keeping track of the number of FDs in flight per user and preventing non-privileged processes from having more FDs in flight than their configured FD limit. Reported-by: socketpair@gmail.com Reported-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> Mitigates: CVE-2013-4312 (Linux 2.0+) Suggested-by: Linus Torvalds <torvalds@linux-foundation.org> Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org> Signed-off-by: Willy Tarreau <w@1wt.eu> Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'drivers/net')
0 files changed, 0 insertions, 0 deletions