Re: [bug report][stable] kernel tried to execute NX-protected page - exploit attempt? (uid: 0)

From: Joseph Qi
Date: Sun Jun 09 2019 - 21:42:31 EST


Confirmed the following 3 upstream commits can resolve this issue:
d2a68c4effd8 x86/ftrace: Do not call function graph from dynamic trampolines
3c0dab44e227 x86/ftrace: Set trampoline pages as executable
7298e24f9042 x86/kprobes: Set instruction page as executable

And they are all included in stable 4.19.49.

Thanks,
Joseph

On 19/6/9 22:50, Greg KH wrote:
> On Sun, Jun 09, 2019 at 09:10:45PM +0800, Joseph Qi wrote:
>> Hi Nadav,
>> Thanks for the comments.
>> I'll test the 3 patches in the mentioned thread.
>
> This should all be fixed in the latest release that happened today. If
> not, please let us know.
>
> thanks,
>
> greg k-h
>