Local users can write to any file they can read. See:
https://plus.google.com/+KeesCook/posts/UUaXm3PcQ4n
and
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8e619
Thanks for the report. Debian security tracker: https://security-tracker.debian.org/tracker/CVE-2016-5195
1 Like