Slashdot Mirror

← Back to Stories (view on slashdot.org)

Linux Kernel 2.6 Local Root Exploit

Posted by kdawson on from the batten-the-hatches dept.

aquatix writes "This local root exploit (Debian, Ubuntu) seems to work everywhere I try it, as long as it's a Linux kernel version 2.6.17 to 2.6.24.1. If you don't trust your users (which you shouldn't), better compile a new kernel without vmsplice." Here is millw0rm's proof-of-concept code.

10 of 586 comments (clear)

  1. HA HA by Anonymous Coward · · Score: -1, Flamebait

    Linux sucks!

    1. Re:HA HA by Computershack · · Score: -1, Flamebait

      No it doesn't. So why isn't the desktop market penetration in double figure percentages and why is Windows Server eating into Linux server market share?
      --
      I only please one person per day. Today is not your day. Tomorrow isn't looking good either. - Scott Adams
  2. Re:ssh by Unoti · · Score: 0, Flamebait

    Oh sure, you're recompiling the kernel of your production environments from home. Hopefully, everything will go really well! Better hope it boots properly the first time! Or perhaps this is a normal procedure for you, and you can change kernels remotely easily when the system won't boot.

  3. But this can't be real! by SwashbucklingCowboy · · Score: -1, Flamebait

    Linux doesn't have nasty defects like Windows. At least that's what all the Linux zealots claim.

    1. Re:But this can't be real! by SwashbucklingCowboy · · Score: 0, Flamebait

      Nonsense-generalising makes the world go round.

      You mean like how Linux zealots are constantly bashing Windows for "being bad"?

    2. Re:But this can't be real! by ceeam · · Score: -1, Flamebait

      > NTFS has had that for a while now.

      No.

      > but your ignorance about Windows.

      LOL.

  4. This is why... by Anonymous Coward · · Score: -1, Flamebait

    I always run as root!

  5. Re:Beauty of OSS by Anonymous Coward · · Score: -1, Flamebait

    Stop the self masturbatory, self congratulation bull shit. Linux blows.

  6. Re:Misleading by agurkan · · Score: 0, Flamebait

    "Grow up, get a real job and see what the real world is like."

    sounds like a bitter adult to me. some people are really happy staying as curious kids, compiling their kernel and do other stuff that is interesting to them, rather getting a "real job".

    --
    ato
  7. Re:Beauty of OSS by Anonymous Coward · · Score: -1, Flamebait

    Shut the fuck you smug prick.