oss-security - CVE-2010-3301 kernel: IA32 System Call Entry Point Vulnerability

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <4C91A38E.1010104@kernel.sg>
Date: Thu, 16 Sep 2010 12:56:46 +0800
From: Eugene Teo <eugeneteo@...nel.sg>
To: oss-security@...ts.openwall.com
CC: "Steven M. Christey" <coley@...us.mitre.org>
Subject: CVE-2010-3301 kernel: IA32 System Call Entry Point Vulnerability

CVE-2007-4573 regression. Local privilege escalation.

Introduced in v2.6.27-rc1 via commit d4d67150.

Upstream commits:
http://git.kernel.org/linus/36d001c70d8a0144ac1d038f6876c484849a74de
http://git.kernel.org/linus/eefdca043e8391dcd719711716492063030b55ac

References:
http://sota.gen.nz/compat2/
https://bugzilla.redhat.com/CVE-2010-3301

Thanks, Eugene
-- 
main(i) { putchar(182623909 >> (i-1) * 5&31|!!(i<7)<<6) && main(++i); }

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.