diff options
| author | pageexec <pageexec@freemail.hu> | 2005-06-27 01:00:19 +0200 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2005-06-27 01:00:19 +0200 |
| commit | 4da62fc70d7cbcf8fa606a8c806d9dc8faa0ceae (patch) | |
| tree | c15f61c9c0a1b1e88990eab47ebc89a4a83b3a4e /include/asm-ia64 | |
| parent | [NETLINK]: Fix two socket hashing bugs. (diff) | |
| download | linux-4da62fc70d7cbcf8fa606a8c806d9dc8faa0ceae.tar.xz linux-4da62fc70d7cbcf8fa606a8c806d9dc8faa0ceae.zip | |
[IPVS]: Fix for overflows
From: <pageexec@freemail.hu>
$subject was fixed in 2.4 already, 2.6 needs it as well.
The impact of the bugs is a kernel stack overflow and privilege escalation
from CAP_NET_ADMIN via the IP_VS_SO_SET_STARTDAEMON/IP_VS_SO_GET_DAEMON
ioctls. People running with 'root=all caps' (i.e., most users) are not
really affected (there's nothing to escalate), but SELinux and similar
users should take it seriously if they grant CAP_NET_ADMIN to other users.
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'include/asm-ia64')
0 files changed, 0 insertions, 0 deletions