{"push_id":3095689992,"size":3,"distinct_size":3,"ref":"refs/heads/fix","head":"6e65a442550adc71c5de4dafc921c567e60d6450","before":"29a3c17092413a283cf930158a1adeb7b49af9ff","commits":[{"sha":"978169647092f68cfc53ab0258c4e5b51537e9bd","author":{"name":"Tom Marshall","email":"aca7565efea89acd404c75db77b7f011dcc02175@gmail.com"},"message":"kernel: Only expose su when daemon is running\n\nIt has been claimed that the PG implementation of 'su' has security\nvulnerabilities even when disabled.  Unfortunately, the people that\nfind these vulnerabilities often like to keep them private so they\ncan profit from exploits while leaving users exposed to malicious\nhackers.\n\nIn order to reduce the attack surface for vulnerabilites, it is\ntherefore necessary to make 'su' completely inaccessible when it\nis not in use (except by the root and system users).\n\nChange-Id: I79716c72f74d0b7af34ec3a8054896c6559a181d","distinct":true,"url":"https://api.github.com/repos/limoniumstatice/fini_kernel_marlin/commits/978169647092f68cfc53ab0258c4e5b51537e9bd"},{"sha":"387d99cd6c92e1b99c9b106c8dbea50c5603566c","author":{"name":"Tom Marshall","email":"aca7565efea89acd404c75db77b7f011dcc02175@gmail.com"},"message":"kernel: Fix potential refcount leak in su check\n\nChange-Id: I8d2c8bed65a01eb0928308df638a04449a5bd881","distinct":true,"url":"https://api.github.com/repos/limoniumstatice/fini_kernel_marlin/commits/387d99cd6c92e1b99c9b106c8dbea50c5603566c"},{"sha":"6e65a442550adc71c5de4dafc921c567e60d6450","author":{"name":"Andrea Arcangeli","email":"fdb87dfd199045af7165780b11640b83768a0d57@cpushare.com"},"message":"fs/exec: fix use after free in execve\n\n\"file\" can be already freed if bprm->file is NULL after\nexec_binprm() return. binfmt_script will do exactly that for\nexample. If the VM reuses the file after fput run(), this will result in\na use ater free.\n\nSo obtain d_is_su before exec_binprm() runs.\n\nThis should explain this crash:\n\n[25333.009554] Unable to handle kernel NULL pointer dereference at virtual address 00000185\n[..]\n[25333.009918] [2:             am:21861] PC is at do_execve+0x354/0x474\n\nChange-Id: I2a8a814d1c0aa75625be83cb30432cf13f1a0681","distinct":true,"url":"https://api.github.com/repos/limoniumstatice/fini_kernel_marlin/commits/6e65a442550adc71c5de4dafc921c567e60d6450"}]}
{"actor":{"display_login":"limoniumstatice"}}