blob: 4dd1814b17bc38921f64a4f97062b4f1f19c8404 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
|
Description: The time subsystem in the Linux kernel through 4.9.9, when CONFIG_TIMER_STATS is enabled, allows local users to discover real PID values (as distinguished from PID values inside a PID namespace) by reading the /proc/timer_list file, related to the print_timer function in kernel/time/timer_list.c and the __timer_stats_timer_set_start_info function in kernel/time/timer.c.
References:
https://bugzilla.kernel.org/show_bug.cgi?id=193921
Notes:
bwh> The upstream "fix" for this is to remove the feature, as it is
bwh> redundant with tracing. I don't think that change is
bwh> acceptable for stable branches, other than possibly 4.9. We
bwh> could instead prevent processes outside the initial pid
bwh> namespace from opening the file.
Bugs:
upstream: released (4.11-rc1) [dfb4357da6ddbdf57d583ba64361c9d792b0e0b1]
4.9-upstream-stable: needed
3.16-upstream-stable: ignored "Upstream fix is not suitable for backporting"
3.2-upstream-stable: ignored "Upstream fix is not suitable for backporting"
sid: released (4.9.13-1) [debian/time-mark-timer_stats-as-broken.patch]
3.16-jessie-security: released (3.16.43-1) [bugfix/all/timer-restrict-timer_stats-to-initial-pid-namespace.patch]
3.2-wheezy-security: released (3.2.88-1) [bugfix/all/timer-restrict-timer_stats-to-initial-pid-namespace.patch]
|
