1
peeps

Bug exposes eight years of Linux kernel • The Register

published 1001 days, 7 hours, 13 minutes ago posted by http://jonnyboats.wordpress.com/http://jonnyboats.wordpress.com/ 1007 days, 10 hours, 22 minutes ago
Thursday, August 20, 2009 7:50:16 PM GMT Friday, August 14, 2009 4:41:09 PM GMT

Bug exposes eight years of Linux kernel By Dan Goodin in San Francisco Posted in Security, 14th August 2009 00:54 GMT

Linux developers have issued a critical update for the open-source OS after researchers uncovered a vulnerability in its kernel that puts most versions built in the past eight years at risk of complete takeover.

The bug involves the way kernel-level routines such as socksendpage react when they are left unimplemented. Instead of linking to a corresponding placeholder, (for example, socknoaccept), the function pointer is left uninitialized. Socksendpage doesn't always validate the pointer before dereferencing it, leaving the OS open to local privilege escalation that can completely compromise the underlying machine. ...

category: News | clicked: 0 | | source: www.theregister.co.uk | show counter code
tags: Linux, security

No comments yet, be the first one to post comment.

To post your comment please login or signup