Slashdot Mirror

← Back to Stories (view on slashdot.org)

Local Privilege Escalation On All Linux Kernels

Posted by timothy on from the uriah-deems-it-scary dept.

QuesarVII writes "Tavis Ormandy and Julien Tinnes have discovered a severe security flaw in all 2.4 and 2.6 kernels since 2001 on all architectures. 'Since it leads to the kernel executing code at NULL, the vulnerability is as trivial as it can get to exploit: an attacker can just put code in the first page that will get executed with kernel privileges.'"

14 of 595 comments (clear)

  1. Ahh... by clone53421 · · Score: 5, Funny

    So that's what the NULL pointers were for.

    --
    Alexander Peter Kristopeit bought his basement from his mommy for one dollar.
  2. I'm safe! by Anonymous Coward · · Score: 5, Funny

    I use Windows!

    1. Re:I'm safe! by dgatwood · · Score: 4, Funny

      Once again, my 2.0 Linux kernel is safe!

      --

      Check out my sci-fi/humor trilogy at PatriotsBooks.

  3. I can hear the OpenBSD users laughing already... by thenextstevejobs · · Score: 5, Funny

    Or I would be able to, if there were any

    --
    Long live the BSD license
  4. Re:I can hear the OpenBSD users laughing already.. by frn123 · · Score: 5, Funny

    Sure there are. And they are both laughing.

  5. Re:pwned by MaskedSlacker · · Score: 4, Funny

    Well by that logic 99% of windows users haven't used a real windows machine either.

  6. Re:Security through Obscurity? by freeweed · · Score: 4, Funny

    Your post got modded up, too.

    --
    Endless arguments over trivial contradictions in books written by ignorant savages to explain thunder in the dark.
  7. Re:pwned by amicusNYCL · · Score: 5, Funny

    Aw, cheer up little guy. I thought it was a very nice comment.

    --
    "Our two-party system is like a bowl of shit looking at itself in a mirror." - Lewis Black
  8. "Many eyes", but all of them nearsighted? by Petersko · · Score: 5, Funny

    And from all across the globe came the sound of geeks crying, for they would soon see their beloved "uptime" reset to zero.

  9. Re:It's from April? Really? by Verdatum · · Score: 5, Funny

    Yeah, that was my fault. Sorry about that. I knew it was there, I just kept putting off fixing it or telling anyone.

  10. Re:pwned by alexborges · · Score: 4, Funny

    Thats what I get for sending you to do the math. Im still too lazy to go check it out and look at methods, years and the rest.

    ||sarcasm|| I take your analysis as true and hereby declare that windows has been exploited lesser than linux, has less malware against and is inherently less prone to attack than linux or turning into a braindead spamzombie than linux. ||end sarcasm||

    Happy?

    --
    NO SIG
  11. Re:pwned by Dragonslicer · · Score: 4, Funny

    Windows Servers are far more inherently secure than Windows Desktops, simply by the way that they're operated.

    Wait, what?

  12. Re:pwned by beav007 · · Score: 5, Funny

    Of course, as this only affects 2.4 and 2.6, users of Debian stable should have no reason to worry.

    See? All that testing is worth it after all!

  13. Re:pwned by maxwell+demon · · Score: 4, Funny

    But it wasn't a real "no true scotsman" fallacy. After all, it didn't involve a scotsman. :-)

    --
    The Tao of math: The numbers you can count are not the real numbers.