Messages in this thread | | | Date | Wed, 26 Jul 2023 21:32:43 +0800 (GMT+08:00) | From | "Lin Ma" <> | Subject | Re: [PATCH v1] xfrm: add forgotten nla_policy for XFRMA_MTIMER_THRESH |
| |
Hello Leon,
> > This CVE is a joke, you need to be root to execute this attack. >
Not really, this call routine only checks
if (!netlink_net_capable(skb, CAP_NET_ADMIN)) return -EPERM;
and any users in most vendor kernel can create a network namespace to get such privilege and trigger this bug.
> Anyway change is ok. > Reviewed-by: Leon Romanovsky <leonro@nvidia.com>
Regards Lin | |