From fd2bfa62fd55697dbdd09402d455f6a3874e13a9 Mon Sep 17 00:00:00 2001 From: pr-hung Date: Thu, 25 Dec 2025 18:12:28 +0800 Subject: [PATCH] Fix potential vulnerability in cloned code (net/netlink/af_netlink.c) --- net/netlink/af_netlink.c | 1 + 1 file changed, 1 insertion(+) diff --git a/net/netlink/af_netlink.c b/net/netlink/af_netlink.c index a731a01039..ac47c4b2f9 100644 --- a/net/netlink/af_netlink.c +++ b/net/netlink/af_netlink.c @@ -3121,6 +3121,7 @@ static void __init netlink_add_usersock_entry(void) rcu_assign_pointer(nl_table[NETLINK_USERSOCK].listeners, listeners); nl_table[NETLINK_USERSOCK].module = THIS_MODULE; nl_table[NETLINK_USERSOCK].registered = 1; + nl_table[NETLINK_USERSOCK].nl_nonroot = NL_NONROOT_SEND; nl_table[NETLINK_USERSOCK].flags = NL_CFG_F_NONROOT_SEND; netlink_table_ungrab();