Hi, As the subject says the 2.6.24.1 is still vulnerable to the vmsplice local root exploit. [opa@test tmp]$ uname -a Linux tester 2.6.24.1 #1 Sun Feb 10 00:06:49 EST 2008 i686 unknown [opa@test tmp]$ ./vms ----------------------------------- Linux vmsplice Local Root Exploit By qaaz ----------------------------------- [+] mmap: 0x0 .. 0x1000 [+] page: 0x0 [+] page: 0x20 [+] mmap: 0x4000 .. 0x5000 [+] page: 0x4000 [+] page: 0x4020 [+] mmap: 0x1000 .. 0x2000 [+] page: 0x1000 [+] mmap: 0xb7f56000 .. 0xb7f88000 [+] root [root@test tmp]# [root@test tmp]# id uid=0(root) gid=0(root) groups=2033(opa) [root@test tmp]# uname -a Linux test 2.6.24.1 #1 Sun Feb 10 00:06:49 EST 2008 i686 unknown Is there any known fix/patch for this? --
| Arjan van de Ven | [patch] Add basic sanity checks to the syscall execution patch |
| Roland McGrath | Re: Linus 2.6.23-rc1 |
| Greg KH | [GIT PATCH] driver core patches against 2.6.24 |
| James Bottomley | Re: Integration of SCST in the mainstream Linux kernel |
git: | |
| Paul Mackerras | New features in gitk |
| Dmitry Potapov | [RFC] Single system account for multiple git users |
| Robert Schiele | [PATCH] change Perl syntax to support Perl 5.6 |
| Stephan Beyer | git sequencer prototype |
| Jacob Meuser | Re: Real men don't attack straw men |
| Frank Bax | RTL8185 wireless support? |
| mufurcz | panic: aml_die aml_setbufinit:988 (acpi?) |
| GVG GVG | OpenSSL Certificate Authority Setup |
| Jeff Garzik | Re: [bug?] tg3: Failed to load firmware "tigon/tg3_tso.bin" |
| Scott Wood | [PATCH 0/9] fs enet and mdio bitbang patches |
| Alan Swanson | IPSEC IPV4 Tunnel Requires IPV6 WIth 2.6.25? |
| Леонид Юрьев | [r8169] patch for RTL8102 (5 new MAC/PHY) |
