Advanced

Linux zero-day affects most Androids, millions of Linux PCs

Posted by abennett on · 2 comments
CSO; By Maria Korolov
Mail this story
Print this story

A new zero-day vulnerability has been discovered that allows Android or Linux applications to escalate privileges and gain root access, according to a report released this morning by Perception Point.

Full Story

  Nav
» Read more about: Story Type: News Story, Security; Groups: Android

» Get new stories by e-mail: nightly or as they are published

« Return to the newswire homepage

  Related stories
» More like this

Comments (2)

The only good news is that CentOS/RHEL 6 is using a kernel version which is not vulnerable.

https://bugzilla.redhat.com/show_bug.cgi?id=1297475

Now I'm so happy that I decided to keep all my servers on "6".

The other piece of good news is that this exploit requires local access, and 99.9% of the world's Linux servers are physically secure and are therefore not vulnerable. The issue will be on systems that support unprivileged users accounts or have installations of non-repo closed software.
The patch is expected today... And,... Once again this is an overblown security risk because it is only exploitable as a local user (a privilege escalation),... which means you already have to be logged on to the server or machine. So, unless you are willy-nilly granting accounts to your servers, or have poor security to login already, you have plenty of time to patch.

Post a comment

A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.

Your message:
|||||
10
Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help

Sign up and post (it is free)  or  Log in and post