RDS Protocol Bug Creates a Linux Kernel Hole, Now Fixed 89
Posted
by
timothy
from the what-does-the-sky-think-as-it-falls dept.
from the what-does-the-sky-think-as-it-falls dept.
Trailrunner7 writes "The open-source Linux operating system contains a serious security flaw that can be exploited to gain superuser rights on a target system. The vulnerability, in the Linux implementation of the Reliable Datagram Sockets (RDS) protocol, affects unpatched versions of the Linux kernel, starting from 2.6.30, where the RDS protocol was first included." The article goes on to say, though, that "Linux installations are only vulnerable if the CONFIG_RDS kernel configuration option is set, and if there are no restrictions on unprivileged users loading packet family modules, as is the case on most stock distributions," and that Linus Torvalds has committed a fix.
Re:A local exploit only (Score:5, Funny)
Listen, not a year goes by, not a year, that I don't hear about some escalator accident involving some bastard kid which could have easily been avoided had some parent - I don't care which one - but some parent conditioned him to fear and respect that escalator.
This is why I stick to older kernels (Score:1, Funny)
2.2.26 is still working great for me, thanks!