rpms/kernel
11
4
Fork 6
Code Issues Pull requests Releases Activity
0 releases 1,143 tags
  • changed/a8/kernel-4.18.0-553.124.4.el8_10 053da2e7bb

    Bump version to 4.18.0-553.124.4

    alukoshko released this 2026-05-15 07:33:28 +00:00 | -93 commits to c8 since this release

    ptrace: require CAP_SYS_PTRACE when task has no mm

    kABI-safe AlmaLinux backport of upstream commit 31e62c2ebbfd
    ("ptrace: slightly saner 'get_dumpable()' logic"). The upstream
    fix adds a user_dumpable bit to task_struct and caches it from
    exit_mm() -- both layout changes would break the kABI signature
    of struct task_struct (referenced by stablelist exports such as
    __put_task_struct, sched_setscheduler, set_cpus_allowed_ptr, and
    wake_up_process).

    Instead, take the minimal kABI-safe slice: in __ptrace_may_access(),
    when task->mm == NULL, require CAP_SYS_PTRACE in init_user_ns
    unconditionally. This closes the Qualys Security Advisory hole
    without touching task_struct or exit.c. The only behavioural
    delta versus upstream is that an already-exited user task whose
    mm has been cleared now also requires CAP_SYS_PTRACE.

    Downloads