![]() |
|
Date: Thu, 16 Sep 2010 13:33:26 +0800 From: Eugene Teo <eugeneteo@...nel.sg> To: oss-security@...ts.openwall.com CC: "Steven M. Christey" <coley@...us.mitre.org> Subject: Re: CVE-2010-3301 kernel: IA32 System Call Entry Point Vulnerability On 09/16/2010 12:56 PM, Eugene Teo wrote: > CVE-2007-4573 regression. Local privilege escalation. > > Introduced in v2.6.27-rc1 via commit d4d67150. > > Upstream commits: > http://git.kernel.org/linus/36d001c70d8a0144ac1d038f6876c484849a74de > http://git.kernel.org/linus/eefdca043e8391dcd719711716492063030b55ac > > References: > http://sota.gen.nz/compat2/ > https://bugzilla.redhat.com/CVE-2010-3301 This was reported by Ben Hawkes. Eugene -- main(i) { putchar(182623909 >> (i-1) * 5&31|!!(i<7)<<6) && main(++i); }
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.