Language Selection

English French German Italian Portuguese Spanish

Bug exposes eight years of Linux kernel

Filed under
Linux
Security

Linux developers have issued a critical update for the open-source OS after researchers uncovered a vulnerability in its kernel that puts most versions built in the past eight years at risk of complete takeover.

The bug involves the way kernel-level routines such as sock_sendpage react when they are left unimplemented. Instead of linking to a corresponding placeholder, (for example, sock_no_accept), the function pointer is left uninitialized. Sock_sendpage doesn't always validate the pointer before dereferencing it, leaving the OS open to local privilege escalation that can completely compromise the underlying machine.

"Since it leads to the kernel executing code at NULL, the vulnerability is as trivial as it can get to exploit," security researcher Julien Tinnes writes here. "An attacker can just put code in the first page that will get executed with kernel privileges."

rest here




More in Tux Machines

Userptr Support Set For AMD Radeon GPUs In Linux 3.18

While it was originally set for Linux 3.17, with the Linux 3.18 kernel that's still months away will be userptr support for the AMD Radeon graphics driver. Read more

Rugged mini-PCs have four gigabit ports, run Ubuntu

Stealth.com has launched four rugged mini-PCs based on 3rd Gen. Intel Core CPUs, featuring four gigabit ports, Ubuntu, and optional PCI and PCIe expansion. The four new LPC480x models are the latest members of the Little PC family of mini-PCs from Stealth.com (formerly Stealth Computer), which include the circa-2011, Intel Atom D525 based LPC-125LPM. The company sells about 50 different LPC models available with Windows or Ubuntu Linux. The systems are designed for embedded control, digital signs, kiosks, mobile navigation, thin-clients, POS, and Human Machine Interface (HMI) applications. Read more

LinuxCon: What's Going On With Fedora.Next

For those curious about what's going on with "Fedora.Next" in revolutionizing the Fedora Linux distribution, Matthew Miller -- Fedora's new Project Leader -- is presenting at LinuxCon Chicago today covering the ongoing working for the Red Hat sponsored distribution. Matthew Miller's presentation is entitled "How Linux Distros Became Boring (and Fedora's Plan to Put Boring Where It Belongs)." It doesn't look like I'll make it over to LinuxCon Chicago due to the weather over here in Indiana today, but fortunately for all those outside of Chicago, you can already find Matthew's slides online. Read more

Intel Sandy Bridge Gains On Linux 3.17 Extend Beyond Graphics

Yesterday I shared some benchmarks showing Intel Sandy Bridge HD Graphics performance increasing on Linux 3.17 for this several year old architecture. This came as a surprise but the good news is the performance improvements on this new Linux kernel don't stop with OpenGL but extend to CPU performance too. Read more