Re: CVE-2010-3301 kernel: IA32 System Call Entry Point Vulnerability

[Eugene Teo <eugeneteo () kernel sg>]

On 09/16/2010 12:56 PM, Eugene Teo wrote:
> CVE-2007-4573 regression. Local privilege escalation.
>
> Introduced in v2.6.27-rc1 via commit d4d67150.
>
> Upstream commits:
> http://git.kernel.org/linus/36d001c70d8a0144ac1d038f6876c484849a74de
> http://git.kernel.org/linus/eefdca043e8391dcd719711716492063030b55ac
>
> References:
> http://sota.gen.nz/compat2/
> https://bugzilla.redhat.com/CVE-2010-3301

This was reported by Ben Hawkes.

Eugene
--
main(i) { putchar(182623909 >> (i-1) * 5&31|!!(i<7)<<6) && main(++i); }