Description: net: Make tcp_allowed_congestion_control readonly in non-init netns
References:
Notes:
 carnil> Introduced in 9cb8e048e5d9 ("net/ipv4/sysctl: show tcp_{allowed,
 carnil> available}_congestion_control in non-initial netns"). Vulnerable versions:
 carnil> 5.7-rc1.
Bugs:
upstream: released (5.12-rc8) [97684f0970f6e112926de631fdd98d9693c7e5c1]
6.7-upstream-stable: N/A "Fixed before branching point"
6.6-upstream-stable: N/A "Fixed before branching point"
6.1-upstream-stable: N/A "Fixed before branching point"
5.10-upstream-stable: released (5.10.32) [35d7491e2f77ce480097cabcaf93ed409e916e12]
4.19-upstream-stable: N/A "Vulnerable code not present"
sid: released (5.10.38-1)
6.1-bookworm-security: N/A "Fixed before branching point"
5.10-bullseye-security: N/A "Fixed before branching point"
4.19-buster-security: N/A "Vulnerable code not present"