Re: [stable] [PATCH] kernel 2.6.24.1 still vulnerable to the vmsplice local root exploit

2008-02-10 Thread Oliver Pinter
thanks the info On 2/10/08, Greg KH <[EMAIL PROTECTED]> wrote: > On Sun, Feb 10, 2008 at 02:02:27PM +0100, Oliver Pinter wrote: > > thx it fixed for 2.6.22 > > > > >>> > > > > commit f6e993b835393543bab2d917f9dea75218473edd > > Author: Oliver Pinter <[EMAIL PROTECTED]> > > Date: Sun Feb 10

Re: [stable] [PATCH] kernel 2.6.24.1 still vulnerable to the vmsplice local root exploit

2008-02-10 Thread Oliver Pinter
simple len and base check is already in kernel: 2.6.22.17 @ 1176,2-16 - fs/splice.c /* * Sanity check this iovec. 0 read succeeds. */ if (unlikely(!len)) break; error = -EFAULT;

Re: [stable] [PATCH] kernel 2.6.24.1 still vulnerable to the vmsplice local root exploit

2008-02-10 Thread Pekka Enberg
On Feb 10, 2008 7:05 PM, Greg KH <[EMAIL PROTECTED]> wrote: > No, this is a different CVE, as it is a different problem from the > original 09 and 10 report. > > It has been given CVE-2008-0600 to address this issue (09 and 10 only > affect .23 and .24 kernels, and have been fixed.) > > > +

Re: [stable] [PATCH] kernel 2.6.24.1 still vulnerable to the vmsplice local root exploit

2008-02-10 Thread Greg KH
On Sun, Feb 10, 2008 at 02:02:27PM +0100, Oliver Pinter wrote: > thx it fixed for 2.6.22 > > >>> > > commit f6e993b835393543bab2d917f9dea75218473edd > Author: Oliver Pinter <[EMAIL PROTECTED]> > Date: Sun Feb 10 14:03:46 2008 +0100 > > [PATCH] vm: splice local root exploit fix for

Re: [stable] [PATCH] kernel 2.6.24.1 still vulnerable to the vmsplice local root exploit

2008-02-10 Thread Greg KH
On Sun, Feb 10, 2008 at 02:02:27PM +0100, Oliver Pinter wrote: thx it fixed for 2.6.22 commit f6e993b835393543bab2d917f9dea75218473edd Author: Oliver Pinter [EMAIL PROTECTED] Date: Sun Feb 10 14:03:46 2008 +0100 [PATCH] vm: splice local root exploit fix for 2.6.22.y Based

Re: [stable] [PATCH] kernel 2.6.24.1 still vulnerable to the vmsplice local root exploit

2008-02-10 Thread Pekka Enberg
On Feb 10, 2008 7:05 PM, Greg KH [EMAIL PROTECTED] wrote: No, this is a different CVE, as it is a different problem from the original 09 and 10 report. It has been given CVE-2008-0600 to address this issue (09 and 10 only affect .23 and .24 kernels, and have been fixed.) +

Re: [stable] [PATCH] kernel 2.6.24.1 still vulnerable to the vmsplice local root exploit

2008-02-10 Thread Oliver Pinter
simple len and base check is already in kernel: 2.6.22.17 @ 1176,2-16 - fs/splice.c /* * Sanity check this iovec. 0 read succeeds. */ if (unlikely(!len)) break; error = -EFAULT;

Re: [stable] [PATCH] kernel 2.6.24.1 still vulnerable to the vmsplice local root exploit

2008-02-10 Thread Oliver Pinter
thanks the info On 2/10/08, Greg KH [EMAIL PROTECTED] wrote: On Sun, Feb 10, 2008 at 02:02:27PM +0100, Oliver Pinter wrote: thx it fixed for 2.6.22 commit f6e993b835393543bab2d917f9dea75218473edd Author: Oliver Pinter [EMAIL PROTECTED] Date: Sun Feb 10 14:03:46 2008 +0100