Executive Summary

This vulnerability in the Linux kernel's Smack security module allows an unprivileged task to create new security labels if the /smack/relabel-self list is not empty. The issue arises because the kernel imports the provided label before verifying if the task is allowed to relabel itself, enabling unauthorized creation of labels by writing to /proc/PID/attr/smack/current. The fix ensures the relabel-self list is checked before importing the label.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can allow unprivileged tasks to create arbitrary security labels, potentially leading to unauthorized access or privilege escalation within the system. This undermines the integrity of the Smack security policy enforcement, possibly allowing attackers to bypass security restrictions.

Useful 0 Not Useful 0