[Midnightbsd-cvs] [MidnightBSD/src] 840f67: execve: fix setid vmspace permission race

[Lucas Holt]

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/src
  Commit: 840f678b75c3fef1cb4129132ad47cfce00f51ba
      https://github.com/MidnightBSD/src/commit/840f678b75c3fef1cb4129132ad47cfce00f51ba
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-07-01 (Wed, 01 Jul 2026)

  Changed paths:
    M sys/compat/linprocfs/linprocfs.c
    M sys/compat/linux/linux_misc.c
    M sys/fs/cuse/cuse.c
    M sys/fs/procfs/procfs_map.c
    M sys/fs/procfs/procfs_mem.c
    M sys/fs/pseudofs/pseudofs_vnops.c
    M sys/kern/kern_exec.c
    M sys/kern/kern_exit.c
    M sys/kern/kern_fork.c
    M sys/kern/kern_proc.c
    M sys/kern/kern_procctl.c
    M sys/kern/kern_prot.c
    M sys/kern/sys_process.c
    M sys/sys/imgact.h
    M sys/sys/proc.h
    M sys/sys/ptrace.h

  Log Message:
  -----------
  execve: fix setid vmspace permission race

Block concurrent procfs-style access while a target process is in execve and bind debugging permission checks to stable vmspace references. This closes the window where a setid image has installed a new address space before credentials are updated.

Update procfs, linprocfs, procctl, ptrace memory access, and related proc inspection paths to use the new exec block and proc_vmspace_ref helpers.

This addresses FreeBSD-SA-26:39.execve / CVE-2026-49415.

Signed-off-by: Lucas Holt <luke at foolishgames.com>

AI-Assisted-by: OpenAI Codex (GPT-5)


  Commit: de174223fa9191db4c8c769e849902ad65cf85e9
      https://github.com/MidnightBSD/src/commit/de174223fa9191db4c8c769e849902ad65cf85e9
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-07-01 (Wed, 01 Jul 2026)

  Changed paths:
    M UPDATING

  Log Message:
  -----------
  UPDATING: note CVE-2026-49415 execve fix

Signed-off-by: Lucas Holt <luke at foolishgames.com>

AI-Assisted-by: OpenAI Codex (GPT-5)


Compare: https://github.com/MidnightBSD/src/compare/12e89cf3bd60...de174223fa91

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications