Bug 209530

Summary:	sys-kernel/gentoo-sources-2.6.24-r1 Still vurnelable to VMSPLICE exploit!
Product:	Gentoo Security	Reporter:	Kamil Kamiński <kamil>
Component:	Kernel	Assignee:	Gentoo Security <security>
Status:	RESOLVED DUPLICATE
Severity:	normal
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Kamil Kamiński 2008-02-10 14:01:40 UTC

After upgrading to latest kernel (2.6.24.1) that should contain VMSPLICE exploit patch I noticed that it is still possible to gain root account on my machine.

I heard that some kernel-configuration might help, but haven't tried yet. Bug still exists and patch haven't helped.

Reproducible: Always

Steps to Reproduce:
1. Log in to your non-root account
2. Run vmsplice exploit
3. Make fun with your root account :/

Comment 1 Tobias Scherbaum (RETIRED) gentoo-dev

2008-02-10 14:03:15 UTC


*** This bug has been marked as a duplicate of bug 209460 ***