Re: [gentoo-hardened] latest kernel exploit patch for vmsplice coming?

[Natanael Copa]

On Sun, 2008-02-10 at 23:41 +0200, pageexec@××××××××.hu wrote:
> On 10 Feb 2008 at 22:32, Alex Howells wrote:
>
> > I wasn't sure we needed a special patch?
>
> it's a kernel bug so it obviously needs a patch, a fix is in the linus
> tree now, i guess it'll be backported quickly.
>
> > Every single box I've tried this exploit on ranging from
> > hardened-sources-2.6.17 through to hardened-sources-2.6.23, its been
> > nailed. Could just be my kernel configuration?
>
> UDEREF prevents exploitation for good, even KERNEXEC alone would
> prevent the kind of code execution that this exploit relies on.

I tried the patch on various systems. The grsecurity patches does
protect this kind of issues.

This is is a real life example of why grsecurity is good for you.

Thanks!

-nc

-- 
gentoo-hardened@l.g.o mailing list