Re: [PATCH 4.14 0/3] cgroup: backports for CVE-2021-4197

On Thu, Apr 14, 2022 at 12:24:18PM +0300, Ovidiu Panait wrote:

Backport summary

1756d7994ad8 ("cgroup: Use open-time credentials for process migraton perm checks")

• Cherry pick from 4.19-stable, no modifications.

0d2b5955b362 ("cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv")

• Cherry-pick from 4.19-stable, minor contextual adjustement.

e57457641613 ("cgroup: Use open-time cgroup namespace for process migration perm checks")

• Cherry-pick from 4.19-stable, no modifications.

Testing

There are no cgroup selftests in 4.14, but when running the ones from 4.19 on the 4.14 kernel, all selftests pass:

THanks for these, all now queued up!

greg k-h