Home » Mailing list archives » linux-kernel » 2008 » February » 11

[PATCH] vmsplice exploit fix (was: splice: fix user pointer access in get_iovec_page_array)

!MAILaRCHIVE_VOTE_RePLACE
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
[view in full thread]
From: Daniel Phillips <phillips@...>
To: Pekka J Enberg <penberg@...>
Cc: <torvalds@...>, <linux-kernel@...>, <stable@...>, <jens.axboe@...>, <akpm@...>, <bastian@...>, <ndenev@...>, <oliver.pntr@...>
Subject: [PATCH] vmsplice exploit fix (was: splice: fix user pointer access in get_iovec_page_array)
Date: Monday, February 11, 2008 - 3:29 am

Kudos to all involved in the rapid response.  But.

Information on patching this vulnerability is not available front and 
center in many of the places you would expect: kernel.org front page, 
debian.org front page, covered on planet.debian.org but without a 
pointer to the patch, and so on.  So this post provides a subject line 
for Google to find, and for good measure mentions the word 
vulnerability.

Also,

   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=464953

I think many users would first go to kernel.org on a day like today, as 
I did.  Nothing to see there.  We could do a way better job of getting 
the word out.

Patch attached as posted above by Pekka.  For the mortals among us:

   cd linux-2.6.recent && patch <fix.vmsplice.exploit.patch -p1

Regards,

Daniel
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
Messages in current thread:
[PATCH] splice: fix user pointer access in get_iovec_page_ar..., Pekka J Enberg, (Sun Feb 10, 10:47 am)
[PATCH] vmsplice exploit fix (was: splice: fix user pointer ..., Daniel Phillips, (Mon Feb 11, 3:29 am)
Re: [PATCH] vmsplice exploit fix (was: splice: fix user poin..., Pekka Enberg, (Mon Feb 11, 3:49 am)
Re: [PATCH] vmsplice exploit fix (was: splice: fix user poin..., Daniel Phillips, (Mon Feb 11, 4:00 am)
Re: [stable] [PATCH] vmsplice exploit fix (was: splice: fix ..., Greg KH, (Mon Feb 11, 3:53 am)
Re: [stable] [PATCH] vmsplice exploit fix (was: splice: fix ..., Daniel Phillips, (Mon Feb 11, 4:05 am)
Re: [PATCH] splice: fix user pointer access in get_iovec_pag..., Willy Tarreau, (Sun Feb 10, 7:37 pm)
Re: [PATCH] splice: fix user pointer access in get_iovec_pag..., Oliver Pinter, (Mon Feb 11, 2:24 am)
Re: [PATCH] splice: fix user pointer access in get_iovec_pag..., Bastian Blank, (Sun Feb 10, 11:17 am)
Re: [PATCH] splice: fix user pointer access in get_iovec_pag..., Oliver Pinter, (Sun Feb 10, 11:31 am)