diff options
author | Mark Johnston <markj@FreeBSD.org> | 2024-08-07 13:38:54 +0000 |
---|---|---|
committer | Mark Johnston <markj@FreeBSD.org> | 2024-08-07 13:42:02 +0000 |
commit | f702110bc4bcc593b38674ec6e4fadf6c4626432 (patch) | |
tree | 9ac58ac19a2218fe117d367a6fe7dcb5da438b77 | |
parent | 02ef8e4061abc0a0fc148a8e41efde46fde0d5b0 (diff) | |
download | src-f702110bc4bc.tar.gz src-f702110bc4bc.zip |
ktrace: Fix an inverted privilege check
Approved by: so
Security: FreeBSD-24:06.ktrace
Security: CVE-2024-6760
Fixes: 1762f674ccb5 ("ktrace: pack all ktrace parameters into allocated structure ktr_io_params")
(cherry picked from commit 166b7573b5220aadf8b02a85933c9651b909b309)
-rw-r--r-- | sys/kern/kern_ktrace.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sys/kern/kern_ktrace.c b/sys/kern/kern_ktrace.c index 2729d0880b31..cc51dbae46f7 100644 --- a/sys/kern/kern_ktrace.c +++ b/sys/kern/kern_ktrace.c @@ -585,7 +585,7 @@ ktrprocexec(struct proc *p) PROC_LOCK_ASSERT(p, MA_OWNED); kiop = p->p_ktrioparms; - if (kiop == NULL || priv_check_cred(kiop->cr, PRIV_DEBUG_DIFFCRED)) + if (kiop == NULL || priv_check_cred(kiop->cr, PRIV_DEBUG_DIFFCRED) == 0) return (NULL); mtx_lock(&ktrace_mtx); |