Log in to Ask a Question

New kernel exploit & Linode - DON'T TRY IT!

general

forum:Xan 16 years, 2 months ago

You may have heard of the new kernel exploit that recently became public.

I just tried the exploit code on the Linode to see if it was vulnerable. It doesn't give me a root login, but it does hang the "machine", pretty hard, too. Took a few minutes for the Lish-initiated reboot to take effect; I thought I was going to have to fill a support ticket.

Best case scenario seems to be a graceless shutdown, so I would have to stamp it Not Recommended.

11 Replies

forum:Xel 16 years, 2 months ago

Yea… Listen to what he said… Because…. yea…

--Xel

caker 16 years, 2 months ago Linode Staff

As soon as the kernel devs settle on a fix, I'll be releasing new kernels…

-Chris

forum:OverlordQ 16 years, 2 months ago

ONe of the 'exploits' patch it :)

Find it in the debian bug ticket

forum:anderiv 16 years, 2 months ago

I believe GKH just committed the fix for this into 2.6.24.2:

caker 16 years, 2 months ago Linode Staff

http://www.linode.com/forums/viewtopic.php?t=3104

-Chris

forum:reallove 16 years, 2 months ago

(asking maybe a stupid question)

how can I upgrade to the latest 2.6.24.2 ,without recompiling myself the kernel ?

forum:anderiv 16 years, 2 months ago

You can select what kernel you're booting in your profile config in LPM (the members section of linode.com).

-erik

forum:reallove 16 years, 2 months ago

thought so,but my latest 2.6 series is 2.6.18.8 (domU linode5).

forum:anderiv 16 years, 2 months ago

Ahh - you're on Xen. The kernel caker just released was a UML kernel. I haven't heard when the Xen kernel will be updated.

forum:reallove 16 years, 2 months ago

considering the big impact of this exploit it would be great to have one also on xen :)

caker 16 years, 2 months ago Linode Staff

For you Xen people:

http://www.linode.com/forums/viewtopic.php?t=3105

-Chris

Reply

Description

Please enter an answer

Tips:

You can mention users to notify them: @username

You can use Markdown to format your question. For more examples see the Markdown Cheatsheet.

> I’m a blockquote.

I’m a blockquote.

[I'm a link] (https://www.google.com)

**I am bold** I am bold

*I am italicized* I am italicized

Log in to Reply