FYI: in case you didn't notice it on Linux-kernel.
-------- Original Message --------
Subject: Re: mremap bug and 2.4?
Date: Mon, 5 Jan 2004 13:26:23 -0200 (BRST)
From: Marcelo Tosatti <marcelo.tosatti@xxxxxxxxxxxx>
To: Robert L. Harris <Robert.L.Harris@xxxxxxxx>
CC: Linux-Kernel <linux-kernel@xxxxxxxxxxxxxxx>
References: <20040105145421.GC2247@xxxxxxxx>
On Mon, 5 Jan 2004, Robert L. Harris wrote:
Just read this on full disclosure:
http://isec.pl/vulnerabilities/isec-0013-mremap.txt
Is it valid? No working proof of concept code has been posted so I can't
test my systems. The article only lists 2.4 and 2.6. Is this
2.4.16-current, etc? Anyone have any details about versions that are
safe so I/We can determine if I need to roll a new production kernel out
again?
It is possible that the problem is exploitable. There is no known public
exploit yet, however.
2.4.24 includes a fix for this (mm/mremap.c diff)
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
|