Silent patched a while ago: Kernel must be compiled with PERF_EVENTS (default on... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		ezdiy on May 14, 2013 \| parent \| context \| favorite \| on: Linux local privilege escalation 0day, 2.6.37 - 3.... Silent patched a while ago: Kernel must be compiled with PERF_EVENTS (default on most modern distros). Bug fixed in 3.8.10. This is the kill log: http://lkml.indiana.edu/hypermail/linux/kernel/1304.1/04302.... This bug got apparently backported from 2.6.37 into centos6 2.6.32 kernels. patch here: https://patchwork.kernel.org/patch/2441281/

ezdiy on May 14, 2013 | [–]

Spender did excellent write-up about how it exactly works: http://www.reddit.com/r/netsec/comments/1eb9iw/sdfucksheepor...

calinet6 on May 14, 2013 | [–]

The patch looks like it's present in 3.8.9 also, correct? (someone double-check)

ezdiy on May 14, 2013 | [–]

You're correct.

Bug is in 2.6.37-3.8.8, fixed in 3.8.9.

http://lxr.linux.no/linux+v3.8.9/kernel/events/core.c#L5331

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact