dump_common_audit_data(): fix racy accesses to ->d_name
stable inclusion from stable-5.10.9 commit a3fddad7af2cd1c60d1ea639a94e7d63c693cd23 bugzilla: 47457 -------------------------------- commit d36a1dd9 upstream. We are not guaranteed the locking environment that would prevent dentry getting renamed right under us. And it's possible for old long name to be freed after rename, leading to UAF here. Cc: stable@kernel.org # v2.6.2+ Signed-off-by:Al Viro <viro@zeniv.linux.org.uk> Signed-off-by:
Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by:
Chen Jun <chenjun102@huawei.com> Acked-by:
Xie XiuQi <xiexiuqi@huawei.com>
Loading
Please sign in to comment