[Gllug] mremap root vulnerability in Linux kernel

[Simon A. Boggis]

On Mon, 2004-01-05 at 18:08, Richard Jones wrote:
> I've just seen this on slashdot.  There's no updated 2.6.0 kernel on
> ftp.uk.kernel.org at the moment.  I'm wondering if anyone knows if
> this kernel is vulnerable (apparently), and if there's a patch for it
> yet.

According the the original report all 2.{2,4,6} series kernels are
vulnerable:
http://isec.pl/vulnerabilities/isec-0012-mremap.txt

I don't know about patches - I thought I saw one vendor say that they'd
patched but it wasn't one of the usual suspects {debian,redhat,suse},
and now I can't find the mail.

Simon

-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug