Re: mremap bug and 2.4?

From: Marcelo Tosatti
Date: Mon Jan 05 2004 - 10:36:39 EST




On Mon, 5 Jan 2004, Robert L. Harris wrote:

>
>
> Just read this on full disclosure:
>
> http://isec.pl/vulnerabilities/isec-0013-mremap.txt
>
> Is it valid? No working proof of concept code has been posted so I can't
> test my systems. The article only lists 2.4 and 2.6. Is this
> 2.4.16-current, etc? Anyone have any details about versions that are
> safe so I/We can determine if I need to roll a new production kernel out
> again?

It is possible that the problem is exploitable. There is no known public
exploit yet, however.

2.4.24 includes a fix for this (mm/mremap.c diff)
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/