In the Linux kernel, the following vulnerability has been resolved: ppp: require CAP_NET_ADMIN in target netns for unattached ioctls /dev/ppp open is currently authorized against file->f_cred->user…
高危 CVSS 8.8
摘要
In the Linux kernel, the following vulnerability has been resolved: ppp: require CAP_NET_ADMIN in target netns for unattached ioctls /dev/ppp open is currently authorized against file->f_cred->user_ns, while unattached administrative ioctls operate on current->nsproxy->net_ns. As a result, a local unprivileged user can create a new user namespace with CLONE_NEWUSER, gain CAP_NET_ADMIN only in that new user namespace, and still issue PPPIOCNEWUNIT, PPPIOCATTACH, or PPPIOCATTCHAN against an in…
中文摘要建设中，暂以英文摘要呈现（DR-003 v2）。
深度研判 · 自动通道
该漏洞尚未生成深度研判报告（DR-003 v2 AI pipeline 建设中）。
受影响产品
- :
数据来源
- NVD DATABASE
原始链接
- https://git.kernel.org/stable/c/1a8a51ce85075a56a743b6f142606dd2696a391c Patch
- https://git.kernel.org/stable/c/2bb6379416fd19f44c3423a00bfd8626259f6067 Patch
- https://git.kernel.org/stable/c/3b2c2157dc2afc5c17cd7238afefca92f1ef330e Patch
- https://git.kernel.org/stable/c/5013be175c7ffd8b39efbc3c9c4db5b10b85fea8 Patch
- https://git.kernel.org/stable/c/5080e188c914110034bbc569d5cfa2f06204681d Patch
- https://git.kernel.org/stable/c/67e901e28d177ac9a9bed76d69ce3471e704a89e Patch
- https://git.kernel.org/stable/c/954745d0223e7caec917c0b2d1a889ff56fa6e54 Patch
- https://git.kernel.org/stable/c/c9edd90c57ae23692fff6b049fdfa4572a9fd532 Patch
时间线
- nvd_ingest NVD