HNHacker News
TopNewBestAskShowJobs

Da5hes

211 karma · joined December 27, 2017

Security Researcher @Da5h_Solo
submissionscomments
Da5hes··on Escaping Docker container using waitid() – CVE-2017-5123
you are right, i actually didn't check on git, my bad
Da5hes··on Escaping Docker container using waitid() – CVE-2017-5123
it is the use of unsafe_put_user without access_ok(), not access_ok() alone
Da5hes··on Escaping Docker container using waitid() – CVE-2017-5123
it was introduced by this commmit: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/lin...

which by itself is in a 4.12 vanilla code tree

Da5hes··on Escaping Docker container using waitid() – CVE-2017-5123
that's correct, versions prior to 4.12 are not affected