oss-security - CVE-2008-3833 kernel: remove SUID when splicing into an inode

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / news community lists wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [month] [year] [list]

Date: Fri, 03 Oct 2008 08:55:18 +0800
From: Eugene Teo <eteo@...hat.com>
To: oss-security@...ts.openwall.com
Subject: CVE-2008-3833 kernel: remove SUID when splicing into an inode

This was committed in upstream kernel. I am unable to find a reference
to any discussion about this on LKML. Fixed by Mark Fasheh.

"generic_file_splice_write() does not remove S_ISUID or S_ISGID. This is
inconsistent with the way we generally write to files."

Please use CVE-2008-3833 for this vulnerability. This has similar
consequences as CVE-2008-4210.

Upstream commit: 8c34e2d63231d4bf4852bac8521883944d770fe3

Reference:
https://bugzilla.redhat.com/show_bug.cgi?id=464450

Thanks, Eugene

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.