Commit 5b5b4650 authored by Thadeu Lima de Souza Cascardo's avatar Thadeu Lima de Souza Cascardo Committed by Xiang Yang
Browse files

tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc 

stable inclusion
from stable-v5.10.215
commit ada28eb4b9561aab93942f3224a2e41d76fe57fa
category: bugfix
bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9S26U
CVE: CVE-2023-52880

Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=ada28eb4b9561aab93942f3224a2e41d76fe57fa



--------------------------------

commit 67c37756 upstream.

Any unprivileged user can attach N_GSM0710 ldisc, but it requires
CAP_NET_ADMIN to create a GSM network anyway.

Require initial namespace CAP_NET_ADMIN to do that.

Signed-off-by: default avatarThadeu Lima de Souza Cascardo <cascardo@canonical.com>
Link: https://lore.kernel.org/r/20230731185942.279611-1-cascardo@canonical.com


Cc: Salvatore Bonaccorso <carnil@debian.org>
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: default avatarXiang Yang <xiangyang3@huawei.com>
parent 25aad1ba

drivers/tty/n_gsm.c

+3 −0
Original line number Diff line number Diff line
@@ -2623,6 +2623,9 @@ static int gsmld_open(struct tty_struct *tty) 
	struct gsm_mux *gsm;

	int ret;



	if (!capable(CAP_NET_ADMIN))

		return -EPERM;



	if (tty->ops->write == NULL)

		return -EINVAL;