Escaping Docker container using waitid() – CVE-2017-5123twistlock.com444 points·by Da5hes·9 ปีที่แล้ว·121 comments
Escaping Docker container using waitid() – CVE-2017-5123twistlock.com2 points·by Da5hes·9 ปีที่แล้ว·0 comments
Da5hes·9 ปีที่แล้ว·discussit is the use of unsafe_put_user without access_ok(), not access_ok() alone
Da5hes·9 ปีที่แล้ว·discussit was introduced by this commmit: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/lin...which by itself is in a 4.12 vanilla code tree