The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attributes, which allows local users to cause a denial of service (capability stripping) via a failed invocation of a system call, as demonstrated by using chown to remove a capability from the ping or Wireshark dumpcap program.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1350
Reference (s):
- BID:76075
- URL: http://www.securityfocus.com/bid/76075
- https://bugzilla.redhat.com/show_bug.cgi?id=1185139
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=770492
- MLIST:[linux-kernel] 20150117 [RFC PATCH RESEND] vfs: Move security_inode_killpriv() after permission checks