Slashdot Mirror

← Back to Stories (view on slashdot.org)

Linux Kernel 2.6 Local Root Exploit

Posted by kdawson on from the batten-the-hatches dept.

aquatix writes "This local root exploit (Debian, Ubuntu) seems to work everywhere I try it, as long as it's a Linux kernel version 2.6.17 to 2.6.24.1. If you don't trust your users (which you shouldn't), better compile a new kernel without vmsplice." Here is millw0rm's proof-of-concept code.

6 of 586 comments (clear)

  1. For those that would rather write than read. by delire · · Score: -1, Offtopic

    This is a local exploit in that kernel version range, in other words instigated by someone at a keyboard connected to the host and with an existing user account on the machine.

  2. Re:Buggy Code by Kreigaffe · · Score: 0, Offtopic

    I'm sorry, but your OS has caught teh A1DZ

    --
    ... still waiting for this free-as-in-beer free beer I keep hearing about. :|
  3. Re:But this can't be real! by ceeam · · Score: 0, Offtopic

    Y'know - Windows is bad not only because it has "defects" but primarily, IMO, because it's so weak, it's basically defective by design with no hopes of fixing. For example - when it's gonna have a real filesystem with name/file (or inode if you like) separation? So I can do updates of things without reboots? So I can rename/replace/delete the file even if it's (gasp) opened or if some other process has CWD in the directory I want moved/deleted?

    Or ulimits? Will Windows ever have those? How do you even run any real server without ulimits?

    Etc...

  4. Re:Actual trial of the exploit..... by larry+bagina · · Score: -1, Offtopic

    nah... this is a nasty hole.

    --
    Do you even lift?

    These aren't the 'roids you're looking for.

  5. Re:Beauty of OSS by dotancohen · · Score: -1, Offtopic

    Wow... 3 posts before some twat turned it into a platform for bashing Windows.

    Pretty good. That's 2 more posts than I expected when I read the headline... Yeah, my wife also complains that I get to the point rather quickly. I know you girls hate that.
    --
    It is dangerous to be right when the government is wrong.
  6. Re:But this can't be real! by LingNoi · · Score: 0, Offtopic

    Stop trolling and flamebaiting.