oss-sec mailing list archives
Re: Linux 2.6.30+/SELinux/RHEL5 test kernel 0day, exploiting the unexploitable
From: Solar Designer <solar () openwall com>
Date: Mon, 20 Jul 2009 15:49:57 +0400
On Mon, Jul 20, 2009 at 01:37:38PM +0200, Marcus Meissner wrote:
Foremost, the mmap_min_addr protection is not in older kernels (<2.6.23) at all, so its kinda "not implemented" instead of "bug".
Oh, understood. I did not think that way, because mmap_min_addr is implemented in recent 2.4 kernels, which are sort of "older", and it is also implemented in RHEL-5'ish OpenVZ kernels that we actually use. (BTW, I'd be happy to share the mmap_min_addr back-port patch to RHEL-5'ish kernels with Red Hat if there's any interest.) I am going to release 2.4.37.3-ow1 with a CVE-2009-1895 fix in it, and I expect it to get into 2.4.37.4. It's not important for systems with "sane" userlands (no crappy SUID-root programs), though. Alexander
Current thread:
- Linux 2.6.30+/SELinux/RHEL5 test kernel 0day, exploiting the unexploitable yersinia (Jul 17)
- Re: Linux 2.6.30+/SELinux/RHEL5 test kernel 0day, exploiting the unexploitable Marcus Meissner (Jul 20)
- Re: Linux 2.6.30+/SELinux/RHEL5 test kernel 0day, exploiting the unexploitable Solar Designer (Jul 20)
- Re: Linux 2.6.30+/SELinux/RHEL5 test kernel 0day, exploiting the unexploitable Marcus Meissner (Jul 20)
- Re: Linux 2.6.30+/SELinux/RHEL5 test kernel 0day, exploiting the unexploitable Solar Designer (Jul 20)
- Re: Linux 2.6.30+/SELinux/RHEL5 test kernel 0day, exploiting the unexploitable Solar Designer (Jul 20)
- Re: Linux 2.6.30+/SELinux/RHEL5 test kernel 0day, exploiting the unexploitable Solar Designer (Jul 20)
- Re: Linux 2.6.30+/SELinux/RHEL5 test kernel 0day, exploiting the unexploitable Solar Designer (Jul 20)
- Re: Linux 2.6.30+/SELinux/RHEL5 test kernel 0day, exploiting the unexploitable Marcus Meissner (Jul 20)
- Re: Linux 2.6.30+/SELinux/RHEL5 test kernel 0day, exploiting the unexploitable Julien Tinnes (Jul 20)