Bug exposes eight years of Linux kernel By Dan Goodin in San Francisco Posted in Security, 14th August 2009 00:54 GMT
Linux developers have issued a critical update for the open-source OS after researchers uncovered a vulnerability in its kernel that puts most versions built in the past eight years at risk of complete takeover.
The bug involves the way kernel-level routines such as socksendpage react when they are left unimplemented. Instead of linking to a corresponding placeholder, (for example, socknoaccept), the function pointer is left uninitialized. Socksendpage doesn't always validate the pointer before dereferencing it, leaving the OS open to local privilege escalation that can completely compromise the underlying machine. ...
No comments yet, be the first one to post comment.