[vox] [fwd] Local Linux root exploit [in splice, affects 2.6.17 thru 2.6.24.1!]

[Kevin Schultz]

unlikely() vs. access_ok()...I'm familiar with access_ok() but unlikely()
was GNU to me:

http://kerneltrap.org/node/4705

Apparently it's a wrapper around branch-prediction check
__builtin_expect(x,y).

Peace

On Feb 11, 2008 11:37 PM, Brian Lavender <brian at brie.com> wrote:

> Holy crap batman!
>
> On Mon, Feb 11, 2008 at 05:02:45AM -0800, Bill Kendrick wrote:
> >
> > A fix looks like it's been committed:
> >
> >
> http://git.kernel.org/?p=3Dlinux/kernel/git/torvalds/linux-2.6.git;a=3Dco=
mmitdiff;h=3D712a30e63c8066ed84385b12edbfb804f49cbc44
> >
> > -bill!
> >
> > ----- Forwarded message from Kristian Erik Hermansen -----
> >
> > Date: Sun, 10 Feb 2008 14:50:39 -0800
> > From: "Kristian Erik Hermansen"
> > Subject: [sf-lug] Fwd: [Gllug] Local Linux root exploit
> > To: "Linux userGroup" <sf-lug at linuxmafia.com>
> >
> > Very bad :-(
> >
> >
> > ---------- Forwarded message ----------
> > From: Richard Jones
> > Date: Feb 10, 2008 2:04 PM
> > Subject: [Gllug] Local Linux root exploit
> > To: Greater London Linux Users Group
> >
> >
> > http://it.slashdot.org/article.pl?sid=3D08/02/10/2011257
> >
> > Exploit:
> > http://www.milw0rm.com/exploits/5092
> >
> > Very temporary fix:
> > http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=3D464953#14
> >
> > Rich.
> >
> > --
> > Richard Jones
> > Red Hat
> > --
> >
> > ----- End forwarded message -----
> >
> > --
> > -bill!
> > bill at newbreedsoftware.com
> > http://www.newbreedsoftware.com/
> > _______________________________________________
> > vox mailing list
> > vox at lists.lugod.org
> > http://lists.lugod.org/mailman/listinfo/vox
>
> --
> Brian Lavender
> http://www.brie.com/brian/
> _______________________________________________
> vox mailing list
> vox at lists.lugod.org
> http://lists.lugod.org/mailman/listinfo/vox
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.lugod.org/pipermail/vox/attachments/20080212/115b6066/att=
achment.htm