diff --git a/fs/proc/base.c b/fs/proc/base.c index 81d77b15b347956b307ec6910cfbd4b5e4939a60..f999e8bd3771c911f08ac8a137ff41a1bfa25bed 100644 --- a/fs/proc/base.c +++ b/fs/proc/base.c @@ -2542,6 +2542,11 @@ static ssize_t proc_pid_attr_write(struct file * file, const char __user * buf, rcu_read_unlock(); return -EACCES; } + /* Prevent changes to overridden credentials. */ + if (current_cred() != current_real_cred()) { + rcu_read_unlock(); + return -EBUSY; + } rcu_read_unlock(); if (count > PAGE_SIZE)