Re: CVE request - Linux kernel: VFAT slab-based buffer overflow

[Jiri Kosina <jikos () jikos cz>]

On Wed, 27 Feb 2013, Greg KH wrote:

> > Hmm, I wonder if perhaps the solution here isn't about spending a lot
> > of time analyzing hundreds of potentially serious bugs and notifying
> > the world about them all in an accurate way.  Perhaps the solution is
> > changing the development model or architecture of the kernel such that
> > there aren't so many bugs with *serious* impact in the first place.
> >
> > Ooops... did I say that out loud?  
>
> There's nothing wrong with that, and we have made many changes in the
> kernel to help mitigate problems before they occur.
>
> If you know of any other ways that we can do this, please let us know.

- W^X
- not letting kernel dereference userspace pointers (and PMAP is not 
  available everywhere, unfortunately)

-- 
Jiri Kosina