Linux Sandbox Bug Could Read a Freed Parent Directory

A Linux sandbox restricts which files a program can access. Landlock, a kernel facility that lets programs apply those restrictions to themselves, had a bug in the code checking file locations. A concurrent directory move could leave the check reading memory that had already been released.LinuxSecurity – Security ArticlesRead More