Ubuntu
linux package

  1. Bug #480112
  2. Comment #0

Comment 0 for bug 480112

Revision history for this message
John Johansen (jjohansen) wrote :

SRU Justification: This bug can cause confined process to oops at address 0.

As reported by Tetsuo Handa on kernel-team mailing list:

In aa_may_change_ptraced_domain, if (!tracer) cred == NULL, and
put_cred(cred) will oops. This will only happen on exec if the task
is marked as LSM_UNSAFE_PTRACE | LSM_UNSAFE_PTRACE_CAP, so should
only happen to ptraced tasks that are confined.

Fix this by returning directly from aa_may_change_ptrace_domain if
there is now tracer.