Bug 17780

Summary:	Local root exploit in Linux Kernel
Product:	Gentoo Linux	Reporter:	Stewart (RETIRED) <blkdeath>
Component:	[OLD] Core system	Assignee:	x86-kernel (DEPRECATED) <x86-kernel>
Status:	RESOLVED DUPLICATE
Severity:	critical
Priority:	Lowest
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Attachments:	patch for Linux 2.4.20/Linux 2.4.21pre

Description Stewart (RETIRED) gentoo-dev

2003-03-18 19:26:26 UTC

Vulnerability: CAN-2003-0127

The Linux 2.2 and Linux 2.4 kernels have a flaw in ptrace. This hole allows
local users to obtain full privileges. Remote exploitation of this hole is
not possible. Linux 2.5 is not believed to be vulnerable.

Linux 2.2.25 has been released to correct Linux 2.2. It contains no other
changes. The bug fixes that would have been in 2.2.5pre1 will now appear in
2.2.26pre1. The patch will apply directly to most older 2.2 releases.

A patch for Linux 2.4.20/Linux 2.4.21pre is attached. The patch also
subtly changes the PR_SET_DUMPABLE prctl. We believe this is neccessary and 
that it will not affect any software. The functionality change is specific 
to unusual debugging situations.

We would like to thank Andrzej Szombierski who found the problem, and
wrote an initial patch. Seth Arnold cleaned up the 2.2 change. Arjan van
de Ven and Ben LaHaise identified additional problems with the original 
fix.

Alan

Comment 1 Stewart (RETIRED) gentoo-dev

2003-03-18 19:28:41 UTC

Created attachment 9578 [details, diff]
patch for Linux 2.4.20/Linux 2.4.21pre

Comment 2 Seemant Kulleen (RETIRED) gentoo-dev

2003-03-18 19:40:48 UTC

it is being worked on, and expected to be released soon in ebuilds

Comment 3 Jay Pfeifer (RETIRED) gentoo-dev

2003-03-18 22:37:00 UTC


*** This bug has been marked as a duplicate of 17704 ***