• changed/a10/kernel-6.12.0-124.56.5.el10_1 a9e982b77d

    alukoshko released this 2026-05-15 09:04:17 +00:00 | -5 commits to c8 since this release

    ptrace: kABI-safe replacement of get_dumpable() fix

    The previous 124.56.4 shipped the upstream patch 31e62c2ebbfd as-is,
    which adds an 'unsigned user_dumpable:1' bit to task_struct. That
    layout change broke kABI: the symtype signature of struct task_struct
    is referenced by hundreds of stablelist exports, all of which got
    flagged by check-kabi during build.

    Replace with a minimal kABI-safe slice that only touches
    kernel/ptrace.c: when task->mm == NULL, require CAP_SYS_PTRACE in
    init_user_ns unconditionally. This closes the Qualys advisory hole
    without modifying task_struct or exit_mm(). The behavioural delta vs
    upstream is that an already-exited user task whose mm has been
    cleared now also requires CAP_SYS_PTRACE.

    Downloads