On 2/15/22 04:37, Jinmeng Zhou wrote:
Dear maintainers, Hi, our tool finds several missing check bugs on Linux kernel v4.18.5 using static analysis. We are looking forward to having more experts' eyes on this. Thank you! Before calling sk_alloc() with SOCK_RAW type, there should be a permission check, ns_capable(ns,CAP_NET_RAW). For example,
v4.18 is not a stable kernel. No one is supposed to use v4.18.5, and expect others to fix bugs in it.