Language Selection

English French German Italian Portuguese Spanish

Linux Vendors Rush to Patch Privilege Escalation Flaw After Root Exploits Emerge

Filed under
Linux

Linux vendors are rushing to patch a privilege escalation vulnerability in the Linux kernel that can be exploited by local attackers to gain root access on the system.

The vulnerability, which is identified as CVE-2012-0056, was discovered by Jüri Aedla and is caused by a failure of the Linux kernel to properly restrict access to the "/proc/
/mem" file.

Linus Torvalds submitted a patch on the official Linux kernel repository on Jan. 17, but before Linux vendors had a chance to apply it for their distributions, proof-of-concept exploit code already appeared online.

rest here




More in Tux Machines

Android Leftovers

Why you need more than just open-source

In 2016, the Open Source Drives Digital Innovation study commissioned by Red-Hat and conducted by analyst house Forrester revealed that 52% of CIOs and senior IT decision makers in the Asia-Pacific (APAC) region are already tapping open source software in areas such as cloud, mobility, big data and DevOps. More IT decision-makers are turning to open source to drive better efficiency and digital innovation, as its flexibility enables organisations to build new customer experiences, services and products more quickly. Read more

How an open source board game is saving the planet

Learning is supposed to be fun, and incorporating games into education is a great way for teachers to help kids have fun while they're learning. There are many free online games that are appropriate for the classroom and there are also board games, including Save the Planet, a board game that teaches kids concrete solutions to environmental problems. Read more

I made my own wearable computer with a Raspberry Pi, and it was almost too easy

Ever since I read about the crazy wearable pioneers back in the ‘90s and early 2000s, I've wanted a wearable computer of my own. I had two major requirements, however: it had to be a computer, and I had to be able to wear it. Smartphones, for the most part, have supplanted most people's interest in or need for a wearable computer. They're great, I highly endorse smartphones. But you can't really "wear" them in any functional way. Read more