1 files changed, 5 insertions, 0 deletions

diff --git a/fs/proc/base.c b/fs/proc/base.c
index f179568b4c76..b6ccb6c57706 100644
--- a/fs/proc/base.c
+++ b/fs/proc/base.c
@@ -2535,6 +2535,11 @@ static ssize_t proc_pid_attr_write(struct file * file, const char __user * buf,
                 rcu_read_unlock();
                 return -EACCES;
         }
+        /* Prevent changes to overridden credentials. */
+        if (current_cred() != current_real_cred()) {
+                rcu_read_unlock();
+                return -EBUSY;
+        }
         rcu_read_unlock();
 
         if (count > PAGE_SIZE)