Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Skip to content
Commit 81bd0d56 authored by Roman Kubiak's avatar Roman Kubiak Committed by Casey Schaufler
Browse files

Smack: type confusion in smak sendmsg() handler



Smack security handler for sendmsg() syscall
is vulnerable to type confusion issue what
can allow to privilege escalation into root
or cause denial of service.

A malicious attacker can create socket of one
type for example AF_UNIX and pass is into
sendmsg() function ensuring that this is
AF_INET socket.

Remedy
Do not trust user supplied data.
Proposed fix below.

Signed-off-by: default avatarRoman Kubiak <r.kubiak@samsung.com>
Signed-off-by: default avatarMateusz Fruba <m.fruba@samsung.com>
Acked-by: default avatarCasey Schaufler <casey@schaufler-ca.com>
parent 79be0935
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment