Hi, Versions 2.9.6 and 2.10.3 fix an input validation issue with the /proc/lttng-logger interface of lttng-modules. An ill-crafted input to the write system call to /proc/lttng-logger can trigger a kernel OOPS.
Given that all users can write to that file, it means that arbitrary local users can trigger a kernel OOPS. It would be preferable to upgrade your lttng-modules to a version containing this fix. Thanks, Mathieu Project website: http://lttng.org Documentation: http://lttng.org/docs Download link: http://lttng.org/download Changelog: 2017-11-03 (National Sandwich Day) LTTng modules 2.9.6 * Fix: lttng-logger get_user_pages_fast error handling 2017-11-03 (National Sandwich Day) LTTng modules 2.10.3 * Fix: lttng-logger get_user_pages_fast error handling -- Mathieu Desnoyers EfficiOS Inc. http://www.efficios.com _______________________________________________ lttng-dev mailing list [email protected] https://lists.lttng.org/cgi-bin/mailman/listinfo/lttng-dev
