Slashdot Mirror

← Back to Stories (view on slashdot.org)

Linux Kernel 2.6 Local Root Exploit

Posted by kdawson on from the batten-the-hatches dept.

aquatix writes "This local root exploit (Debian, Ubuntu) seems to work everywhere I try it, as long as it's a Linux kernel version 2.6.17 to 2.6.24.1. If you don't trust your users (which you shouldn't), better compile a new kernel without vmsplice." Here is millw0rm's proof-of-concept code.

1 of 586 comments (clear)

  1. How do I get infected? by LingNoi · · Score: -1, Redundant

    Can someone explain to me how this exploit will jump through my internets and kill my kernel?

    It looks like proof of concept code which I have to compile and install myself before it works even works.

    This thing seems a little overblown, it's hardly an exploit if I have to jump through hoops to get infected..