On Thu, 05 Mar 2020 10:42:39 +0000
bugzilla-daemon@bugzilla.kernel.org wrote:
https://bugzilla.kernel.org/show_bug.cgi?id=206761
Bug ID: 206761
Summary: escape codes in network interface names causes chaos
Product: Networking
Version: 2.5
Kernel Version: 5.6
Hardware: All
OS: Linux
Tree: Mainline
Status: NEW
Severity: normal
Priority: P1
Component: Other
Assignee: stephen@networkplumber.org
Reporter: george.shuklin@gmail.com
Regression: No
netlink permits creation of interfaces with escape codes. Suck names can trick
root by drawing at random places in terminal.
Minimal proof of concept:
echo -e '\x1B[2J'|xargs -I I ip link add I type dummy
ip l
(rollback): echo -e '\x1B[2J'|xargs -I I ip link del I
My opinion is that this is not a problem that can be addressed without breaking kernel ABI.