Advanced

Linux kernel has multiple flaws

Posted by dave on · 2 comments
Search Security		Mail this story
Print this story

Users are advised to update their systems against multiple denial-of-service and permission vulnerabilities in the Linux kernel that could be exploited by an attacker. Gentoo said the flaws are "high impact." "The Linux kernel allows a local attacker to mount a remote file system on a vulnerable Linux host and modify files' group IDs," Gentoo said in an advisory. "Also, a flaw in the handling of /proc attributes has been found in 2.6 series kernels, allowing the unauthorized modification of /proc entries, especially those which rely solely on file permissions for security to vital kernel parameters."

Full Story

  Nav
» Read more about: Story Type: News Story; Groups: GNU, Kernel

» Get new stories by e-mail: nightly or as they are published

« Return to the newswire homepage

  Related stories
» More like this

Comments (2)

Void_Main ·
The Linux kernel allows a local attacker to mount a remote file system on a vulnerable Linux host and modify files

Are they talking NFS here? If so I would have to assume to be exploited that you would have to:

A) have NFS related kernel modules loaded B) have NFS related services running C) not have a firewall running and blocking NFS related ports D) have directories exported

Does anyone know any more specifics on this? I hate it when articles are so vague.

Thanks!
tzafrir ·
The advisory is not so new. It is a couple of weeks old, IIRC. (sorry, no time to search for it)

Post a comment

A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.

Your message:
|||||
10
Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help

Sign up and post (it is free)  or  Log in and post