New Linux Kernel Crash-Exploit discovered

Ant writes " According to linuxreviews article's on 6/11/2004, there is a nasty bug that lets a simple C program crash the kernel (2.4.18-2.6.x reported so far), effectively locking the whole system. Affects both 2.4.2x and 2.6.x kernels on the x86 architecture. This exploit can be compiled and run without a root access and with a shell access. There are detailed information and source code mentioned. " You need to have shell access to run this program; it's also worth noting that not *all* flavors are vulnerable. Please read article for the full details.

Comments

Re:The best way to avoid this bug

[aixou]

is to buy a mac and run yellow dog on it!

Let me fix that for you:

is to buy a mac and run OS X on it! :)

Re:The best way to avoid this bug

[bossesjoe]

I wonder how long it will be before this is modded down?

OT: Bugtraq auto-unsubscribe?

[menscher]

This is only slightly off-topic, since it's directly related to finding out about things like this:

Anyone else getting repeatedly unsubscribed from bugtraq and the other securityfocus mailing lists? About once a month I get an email from them claiming my email was bouncing (often because their DNS was sending it to the wrong machine!). And about once a month I don't get the email, and am unsubscribed from a random list. Which really sucks, because it takes a few days to realize, and then you've lost a few days'-worth of important announcements.

I'm just curious whether this is a widespread problem; since I'm fairly certain my connection isn't flaky, the problem must be at their end.

Re:This is another reason why C should be deprecat

[spacepimp]

crack smokers unite.. all too long have we been derided as ignorant burntout freaks.. by people who dont undesrtand us.. we have made much progress since the 80s and have a great new gui too..