oss-security - Re: CVE-2010-3301 kernel: IA32 System Call Entry Point Vulnerability

Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Thu, 16 Sep 2010 13:33:26 +0800
From: Eugene Teo <eugeneteo@...nel.sg>
To: oss-security@...ts.openwall.com
CC: "Steven M. Christey" <coley@...us.mitre.org>
Subject: Re: CVE-2010-3301 kernel: IA32 System Call Entry Point
 Vulnerability

On 09/16/2010 12:56 PM, Eugene Teo wrote:
> CVE-2007-4573 regression. Local privilege escalation.
>
> Introduced in v2.6.27-rc1 via commit d4d67150.
>
> Upstream commits:
> http://git.kernel.org/linus/36d001c70d8a0144ac1d038f6876c484849a74de
> http://git.kernel.org/linus/eefdca043e8391dcd719711716492063030b55ac
>
> References:
> http://sota.gen.nz/compat2/
> https://bugzilla.redhat.com/CVE-2010-3301

This was reported by Ben Hawkes.

Eugene
-- 
main(i) { putchar(182623909 >> (i-1) * 5&31|!!(i<7)<<6) && main(++i); }

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.