oss-sec mailing list archives

Re: CVE Request: overlayfs

From: Kurt Seifried <kseifried () redhat com>
Date: Tue, 17 Jan 2012 14:03:53 -0700

On 01/17/2012 10:55 AM, Marc Deslauriers wrote:

Could we please get a CVE assigned to the following issue:

overlayfs, as used in the Ubuntu kernel, doesn't perform required inode
security checks, bypassing intended security restrictions.

Bug:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/915941

Upstream source:
git://git.kernel.org/pub/scm/linux/kernel/git/mszeredi/vfs.git

Thanks,

Marc.

Please use CVE-2012-0055 for this issue.

-- 

-- Kurt Seifried / Red Hat Security Response Team

Current thread:

CVE Request: overlayfs Marc Deslauriers (Jan 17)
- Re: CVE Request: overlayfs Kurt Seifried (Jan 17)