Arch Linux

tlvb

Member

From: Sweden

Registered: 2008-10-06

Posts: 297

Website

New kernel vulnerability [bug closed, does not affect our kernels]

http://www.theregister.co.uk/2009/08/14 … linux_bug/

Linux developers have issued a critical update for the open-source OS after researchers uncovered a vulnerability in its kernel that puts most versions built in the past eight years at risk of complete takeover.

The bug involves the way kernel-level routines such as sock_sendpage react when they are left unimplemented. Instead of linking to a corresponding placeholder, (for example, sock_no_accept), the function pointer is left uninitialized. Sock_sendpage doesn't always validate the pointer before dereferencing it, leaving the OS open to local privilege escalation that can completely compromise the underlying machine.

I'm not sure if this should be submitted as a bug, or be posted on a mailing list (advice please).
A quick look on the open dev mailing list + forum search did not turn up anything.

Last edited by tlvb (2009-08-15 13:19:42)

---

I need a sorted list of all random numbers, so that I can retrieve a suitable one later with a binary search instead of having to iterate through the generation process every time.

wonder

Developer

From: Bucharest, Romania

Registered: 2006-07-05

Posts: 5,941

Website

Re: New kernel vulnerability [bug closed, does not affect our kernels]

open a bug report and post a link the commit that fix this issue.

---

Give what you have. To someone, it may be better than you dare to think.

tlvb

Member

From: Sweden

Registered: 2008-10-06

Posts: 297

Website

Re: New kernel vulnerability [bug closed, does not affect our kernels]

Like this? http://bugs.archlinux.org/task/15935
Haven't done any bug reporting before, so my apologies if the something is missing/misconfigured.

EDIT: The bug has been closed as the problem should not affect our kernel.

Last edited by tlvb (2009-08-15 13:20:35)

---

I need a sorted list of all random numbers, so that I can retrieve a suitable one later with a binary search instead of having to iterate through the generation process every time.