diff --git a/fs/proc/base.c b/fs/proc/base.c index ddef482f133406737e09e5df4966aea9b6ec06aa..87ba007b86dbb1821b387e2ecaf54ab9bc6e7f0f 100644 --- a/fs/proc/base.c +++ b/fs/proc/base.c @@ -2539,6 +2539,11 @@ static ssize_t proc_pid_attr_write(struct file * file, const char __user * buf, rcu_read_unlock(); return -EACCES; } + /* Prevent changes to overridden credentials. */ + if (current_cred() != current_real_cred()) { + rcu_read_unlock(); + return -EBUSY; + } rcu_read_unlock(); if (count > PAGE_SIZE)