diff options
| author | Mark Johnston <markj@FreeBSD.org> | 2026-05-29 21:41:35 +0000 |
|---|---|---|
| committer | Mark Johnston <markj@FreeBSD.org> | 2026-06-07 17:48:17 +0000 |
| commit | 0dcf9bba4b9fe7f2f0356095f21b2cb86be02e1d (patch) | |
| tree | 956c38cc3165f3becb59014a3ecaa0203b64305f /libexec | |
| parent | e6859453de61e683b77b0172e98e06181d82a930 (diff) | |
linux: Correct the issetugid check in copyout_auxargs
The runtime linker in glibc relies on the AT_SECURE auxv entry to know
whether the executable is set-ugid, if so then various dangerous
functionality such as LD_PRELOAD is disabled.
The check added in commit 669414e4fb74 failed to take into account the
fact that during execve, P_SUGID may not yet be set for a set-ugid
process. Correct the test.
Approved by: so
Security: FreeBSD-SA-26:30.linux
Security: CVE-2026-49413
Reported by: Minseong Kim
Fixes: 669414e4fb74 ("Implement AT_SECURE properly.")
Reviewed by: kib
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D57350
Diffstat (limited to 'libexec')
0 files changed, 0 insertions, 0 deletions