[Midnightbsd-cvs] [MidnightBSD/src] 628dc4: execve: fix setid vmspace permission race

[Lucas Holt]

  Branch: refs/heads/stable/4.0
  Home:   https://github.com/MidnightBSD/src
  Commit: 628dc4ffd3f92007ac271f9645fef80dace39829
      https://github.com/MidnightBSD/src/commit/628dc4ffd3f92007ac271f9645fef80dace39829
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-07-01 (Wed, 01 Jul 2026)

  Changed paths:
    M sys/compat/linprocfs/linprocfs.c
    M sys/compat/linux/linux_misc.c
    M sys/fs/cuse/cuse.c
    M sys/fs/procfs/procfs_map.c
    M sys/fs/procfs/procfs_mem.c
    M sys/fs/pseudofs/pseudofs_vnops.c
    M sys/kern/kern_exec.c
    M sys/kern/kern_exit.c
    M sys/kern/kern_fork.c
    M sys/kern/kern_proc.c
    M sys/kern/kern_procctl.c
    M sys/kern/kern_prot.c
    M sys/kern/sys_process.c
    M sys/sys/imgact.h
    M sys/sys/proc.h
    M sys/sys/ptrace.h

  Log Message:
  -----------
  execve: fix setid vmspace permission race

Block concurrent procfs-style access while a target process is in execve and bind debugging permission checks to stable vmspace references. This closes the window where a setid image has installed a new address space before credentials are updated.

Update procfs, linprocfs, procctl, ptrace memory access, and related proc inspection paths to use the new exec block and proc_vmspace_ref helpers.

This addresses FreeBSD-SA-26:39.execve / CVE-2026-49415.

Signed-off-by: Lucas Holt <luke at foolishgames.com>

AI-Assisted-by: OpenAI Codex (GPT-5)


  Commit: aa4a1c1e882fb48fc045c684fb799d79a841b6df
      https://github.com/MidnightBSD/src/commit/aa4a1c1e882fb48fc045c684fb799d79a841b6df
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-07-01 (Wed, 01 Jul 2026)

  Changed paths:
    M UPDATING

  Log Message:
  -----------
  UPDATING: note CVE-2026-49415 execve fix

Signed-off-by: Lucas Holt <luke at foolishgames.com>

AI-Assisted-by: OpenAI Codex (GPT-5)


Compare: https://github.com/MidnightBSD/src/compare/6e7e5a8a76cf...aa4a1c1e882f

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications