Re: [ltp] WARNING: security hole in thinkpad-acpi and ibm-acpi kernel modules

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, 21 Jul 2009, Henrique de Moraes Holschuh wrote:
> Nobody has tried to write a exploit for this bug yet, but it does seem like
> it is exploitable.

It turns out that the Linux VFS layer on x86 (the only arch thinkpad-acpi
works on, anyway) protects against very big writes, so the bug is likely not
exploitable.

Still, better safe than sorry, and the patch (with a much simpler commit
message, since it looks like it is not a security bug after all) is going to
be present on 2.6.31, and it was submitted for inclusion on 2.6.27 and
2.6.30.

-- 
  "One disk to rule them all, One disk to find them. One disk to bring
  them all and in the darkness grind them. In the Land of Redmond
  where the shadows lie." -- The Silicon Valley Tarot
  Henrique Holschuh

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with 
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
ibm-acpi-devel mailing list
ibm-acpi-devel@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/ibm-acpi-devel

[Index of Archives]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Share Photos]     [Security]     [Netfilter]     [Bugtraq]     [Photo]     [Yosemite Photos]     [Yosemite Advice]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Device Mapper]

  Powered by Linux