On Wednesday 03 December 2003 01:10, Jay Maynard wrote:
> On Wed, Dec 03, 2003 at 01:03:05AM +0100, Arnd Bergmann wrote:
> > Which vulnerabilities are you referring to? The brk() attack obviously
> > can't work on s390
>
> Dumb question: Why not?
The exploit works by extending a process's address space to include the
kernel memory, which i386 systems map into the virtual address space starting
at 0xc0000000. On s390, user and kernel memory are never present in the same
address space: The kernel uses CR1 for addressing the 'primary' address space
and processes are running in the CR13 addressed 'home' address space. Code
running in the home space can never access memory from other address spaces.
Arnd <><
