Re: CVE-2022-2590: Linux kernel: Modifying shmem/tmpfs files without write permissions

[David Hildenbrand <david () redhat com>]

On 08.08.22 09:18, David Hildenbrand wrote:
> Hi,
>
> I found a security issue (CVE-2022-2590) in the Linux kernel similar to
> Dirty COW (CVE-2016-5195), however, restricted to shared memory (shmem /
> tmpfs). I notified distributions one week ago and the embargo ended today.

I forgot to add an important part: Nadav Amit raised [1] that the dirty
bit is possibly problematic and essentially participated to the
discovery of this security issue.

s/I found/Nadav and I found/

Credit where credit is due.

[1] https://lore.kernel.org/all/20220619233449.181323-4-namit () vmware com/

-- 
Thanks,

David / dhildenb