[CVE-2015-2925][Trusty][PATCH 0/2] Bind mount escape fixes

Luis Henriques luis.henriques at canonical.com
Mon Oct 5 12:57:33 UTC 2015


Following this email I am sending CVE-2015-2925 fix for Trusty.  The fix
includes commits:

cde93be45a8a dcache: Handle escaped paths in prepend_path
397d425dc26d vfs: Test for and handle paths that are unreachable from their mnt_root

The backports have been provided by the author in the stable mailing-list:

http://permalink.gmane.org/gmane.linux.kernel.stable/151074

Eric W. Biederman (2):
  dcache: Handle escaped paths in prepend_path
  vfs: Test for and handle paths that are unreachable from their
    mnt_root

 fs/dcache.c |  7 +++++++
 fs/namei.c  | 31 ++++++++++++++++++++++++++++---
 2 files changed, 35 insertions(+), 3 deletions(-)





More information about the kernel-team mailing list