Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.advocacy > #377157

Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one.

From Peter Köhlmann <peter-koehlmann@t-online.de>
Newsgroups comp.os.linux.advocacy
Subject Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one.
Date 2016-10-21 17:49 +0200
Organization DNLA GmbH
Message-ID <nuddct$iu4$1@dont-email.me> (permalink)
References <e6umrcFb6l1U12@mid.individual.net>

Show all headers | View raw

Jim Polaski wrote:

> http://arstechnica.com/security/2016/10/most-serious-linux-privilege-escalation-bug-ever-is-under-active-exploit/#p3
> 
> "Lurking in the kernel for nine years, flaw gives untrusted users
> unfettered root access."
> 
> 
> "The in-the-wild attacks exploiting this specific vulnerability were
> found by Linux developer Phil Oester, according to an informational site
> dedicated to the vulnerability. It says Oester found the exploit using
> an HTTP packet capture, but the site doesn't elaborate. Update: In
> e-mails received about nine hours after this post went live, Oester
> wrote:
> 
>     Any user can become root in < 5 seconds in my testing, very
> reliably. Scary stuff.
> 
>     The vulnerability is easiest exploited with local access to a system
> such as shell accounts. Less trivially, any web server/application
> vulnerability which allows the attacker to upload a file to the impacted
> system and execute it also works.
> 
>     The particular exploit which was uploaded to my system was compiled
> with GCC 4.8.5 released 20150623, though this should not imply that the
> vulnerability was not available earlier than that date given its
> longevity. As to who is being targeted, anyone running Linux on a web
> facing server is vulnerable. "


It is a bad one. But only for server machines, not desktop

And "Dirty COW" is *old*

Linus Torvalds himself describes the bug as being one he had himself patched 
(badly) in kernel 2.6.22, but it was later reverted to the old state.
Initially it was a rather "esoteric" bug, nearly impossible to exploit, but 
kernels have evolved and made the bug more serious. Seems to have been 
forgotten later because it had already been attended to


It is already patched, btw

Back to comp.os.linux.advocacy | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Jim Polaski <jpolaski@linuxmail.org> - 2016-10-21 14:25 +0000
  Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Peter Köhlmann <peter-koehlmann@t-online.de> - 2016-10-21 17:49 +0200
    Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Melzzzzz <mel@zzzzz.com> - 2016-10-21 22:45 +0200
      Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Jim Polaski <jpolaski@linuxmail.org> - 2016-10-21 20:51 +0000
        Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Melzzzzz <mel@zzzzz.com> - 2016-10-21 22:59 +0200
          Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Jim Polaski <jpolaski@linuxmail.org> - 2016-10-21 21:11 +0000
          Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Peter Köhlmann <peter-koehlmann@t-online.de> - 2016-10-21 23:14 +0200
            Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Jim Polaski <jpolaski@linuxmail.org> - 2016-10-21 21:20 +0000
              Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Peter Köhlmann <peter-koehlmann@t-online.de> - 2016-10-22 11:38 +0200
        Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Peter Köhlmann <peter-koehlmann@t-online.de> - 2016-10-21 23:13 +0200
          Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Jim Polaski <jpolaski@linuxmail.org> - 2016-10-21 21:17 +0000
            Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Peter Köhlmann <peter-koehlmann@t-online.de> - 2016-10-22 11:35 +0200
          Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Marek Novotny <marek.novotny@marspolar.com> - 2016-10-21 17:23 -0400
            Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Jim Polaski <jpolaski@linuxmail.org> - 2016-10-21 21:52 +0000
              Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Peter Köhlmann <peter-koehlmann@t-online.de> - 2016-10-22 11:33 +0200
                Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Chris Ahlstrom <OFeem1987@teleworm.us> - 2016-10-22 08:19 -0400
                Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Marek Novotny <marek.novotny@marspolar.com> - 2016-10-22 08:33 -0400
                Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Silver Slimer <.m@nsn.s> - 2016-10-22 09:23 -0400
                Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Peter Köhlmann <peter-koehlmann@t-online.de> - 2016-10-22 15:48 +0200
                Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Silver Slimer <.m@nsn.s> - 2016-10-22 10:02 -0400
                Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Peter Köhlmann <peter-koehlmann@t-online.de> - 2016-10-22 16:07 +0200
                Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. William Poaster <wp@dev.null> - 2016-10-22 16:46 +0100
                Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Silver Slimer <.m@nsn.s> - 2016-10-23 09:04 -0400
                Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Silver Slimer <.m@nsn.s> - 2016-10-22 14:34 -0400
                Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. -hh <recscuba_google@huntzinger.com> - 2016-10-22 12:45 -0700
                Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Steve Carroll <frelwizzen@gmail.com> - 2016-10-22 12:10 -0700
            Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. William Poaster <wp@dev.null> - 2016-10-21 23:05 +0100
              Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Marek Novotny <marek.novotny@marspolar.com> - 2016-10-21 18:09 -0400
    Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. -hh <recscuba_google@huntzinger.com> - 2016-10-22 04:35 -0700
  Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Silver Slimer <.m@nsn.s> - 2016-10-21 11:50 -0400
    Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Jim Polaski <jpolaski@linuxmail.org> - 2016-10-21 15:56 +0000
      Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Silver Slimer <.m@nsn.s> - 2016-10-21 12:46 -0400
        Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Jim Polaski <jpolaski@linuxmail.org> - 2016-10-21 20:16 +0000
          Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Silver Slimer <.m@nsn.s> - 2016-10-21 18:30 -0400
            Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Jim Polaski <jpolaski@linuxmail.org> - 2016-10-21 22:54 +0000
    Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Jim Polaski <jpolaski@linuxmail.org> - 2016-10-21 16:10 +0000
      Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. tmelmosfire <tmelmosfire@gmail.com> - 2016-10-21 09:34 -0700
      Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Melzzzzz <mel@zzzzz.com> - 2016-10-21 22:43 +0200
        Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Jim Polaski <jpolaski@linuxmail.org> - 2016-10-21 20:45 +0000
          Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Melzzzzz <mel@zzzzz.com> - 2016-10-21 22:47 +0200
            Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Jim Polaski <jpolaski@linuxmail.org> - 2016-10-21 20:52 +0000
              Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. GreyCloud <Cumulus@mist.com> - 2016-10-21 19:31 -0600
                Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Jim Polaski <jpolaski@linuxmail.org> - 2016-10-22 01:46 +0000
                Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Peter Köhlmann <peter-koehlmann@t-online.de> - 2016-10-22 11:30 +0200
                A Flounder is as Flounder does Chris Ahlstrom <OFeem1987@teleworm.us> - 2016-10-22 08:12 -0400
                Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. GreyCloud <Cumulus@mist.com> - 2016-10-22 13:49 -0600
        Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. GreyCloud <Cumulus@mist.com> - 2016-10-21 19:31 -0600
          Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Jim Polaski <jpolaski@linuxmail.org> - 2016-10-22 01:44 +0000
          Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Melzzzzz <mel@zzzzz.com> - 2016-10-22 04:29 +0200
          Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Peter Köhlmann <peter-koehlmann@t-online.de> - 2016-10-22 11:30 +0200
            Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. GreyCloud <Cumulus@mist.com> - 2016-10-22 13:50 -0600
      Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Chris Ahlstrom <OFeem1987@teleworm.us> - 2016-10-22 08:11 -0400
        Re: 9 Year Old Linux Kernel Exploit Discovered. This is a bad one. Godzilla <godzilla@lizardboss.invalid> - 2016-10-22 12:24 +0000

csiph-web