Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue, 27 Dec 2011 21:26:04 +0400
From: Vasiliy Kulikov <>
To: Eugene Teo <>
	Moritz Muehlenhoff <>
Subject: Re: Status of two Linux kernel issues w/o CVE


On Sun, Dec 25, 2011 at 05:53 +0800, Eugene Teo wrote:
> >> 2: /proc/$PID/{sched,schedstat} information leak
> >> Vasiliy Kulikov of OpenWall posted a demo exploit.
> >>
> >>
> >> AFAICS no CVE ID was assigned to this?
> IIRC, it's an issue but there's no resolution as existing code may break.
> There are also,
> /proc/{interrupts, stat}
> /dev/pts/, /dev/tty*

Correct, neither of these are fixed yet :-(

/proc/$pid/* vuln will be fixed in the following patch series by introducing
a restricted procfs permission mode:

Currently these series are in the -mm tree.


Vasiliy Kulikov - bringing security into open computing environments

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.