[Midnightbsd-cvs] [MidnightBSD/src] ddb3e6: execve: fix setid vmspace permission race

[Lucas Holt]

  Branch: refs/heads/stable/4.1
  Home:   https://github.com/MidnightBSD/src
  Commit: ddb3e65229ed40103f3f0e6cbc624741a08b41a9
      https://github.com/MidnightBSD/src/commit/ddb3e65229ed40103f3f0e6cbc624741a08b41a9
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-07-01 (Wed, 01 Jul 2026)

  Changed paths:
    M sys/compat/linprocfs/linprocfs.c
    M sys/compat/linux/linux_misc.c
    M sys/fs/cuse/cuse.c
    M sys/fs/procfs/procfs_map.c
    M sys/fs/procfs/procfs_mem.c
    M sys/fs/pseudofs/pseudofs_vnops.c
    M sys/kern/kern_exec.c
    M sys/kern/kern_exit.c
    M sys/kern/kern_fork.c
    M sys/kern/kern_proc.c
    M sys/kern/kern_procctl.c
    M sys/kern/kern_prot.c
    M sys/kern/sys_process.c
    M sys/sys/imgact.h
    M sys/sys/proc.h
    M sys/sys/ptrace.h

  Log Message:
  -----------
  execve: fix setid vmspace permission race

Block concurrent procfs-style access while a target process is in execve and bind debugging permission checks to stable vmspace references. This closes the window where a setid image has installed a new address space before credentials are updated.

Update procfs, linprocfs, procctl, ptrace memory access, and related proc inspection paths to use the new exec block and proc_vmspace_ref helpers.

This addresses FreeBSD-SA-26:39.execve / CVE-2026-49415.

Signed-off-by: Lucas Holt <luke at foolishgames.com>

AI-Assisted-by: OpenAI Codex (GPT-5)


  Commit: 70b46a38e55d70c53a99279c69af3458f28d599a
      https://github.com/MidnightBSD/src/commit/70b46a38e55d70c53a99279c69af3458f28d599a
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-07-01 (Wed, 01 Jul 2026)

  Changed paths:
    M UPDATING

  Log Message:
  -----------
  UPDATING: note CVE-2026-49415 execve fix

Signed-off-by: Lucas Holt <luke at foolishgames.com>

AI-Assisted-by: OpenAI Codex (GPT-5)


Compare: https://github.com/MidnightBSD/src/compare/90d11d815de2...70b46a38e55d

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications