Bug#308757: CAN-2005-1263: Linux kernel ELF core dump privilege elevation
tags 308757 + pending
thanks
On Thu, May 12, 2005 at 09:13:48AM +0200, Moritz Muehlenhoff wrote:
> Package: kernel-source-2.4.27
> Version: unavailable; reported 2005-05-12
> Severity: grave
> Tags: security patch
>
> Paul Starzetz has found another flaw in the Linux kernel that can be exploited
> to gain extended local privileges. Please see his detailed advisory at
> http://isec.pl/vulnerabilities/isec-0023-coredump.txt
>
> Greg Kroah-Hartman has posted a patch for 2.6, which should apply to 2.4 as
> well. It's attached.
I have mangled this fix so it applies to 2.4.27 and committed it to SVN.
--
Horms
Reply to: