TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

Hole in Linux kernel provides root rights

69 pointsby spahlover 14 years ago

6 comments

jacquesmover 14 years ago
Strike one for regression testing.<p>I tried the exploit on all our 64 bit boxes and it seems to fail on every one of them.<p>Here are the uname -a strings from a representative sample:<p>Linux c01_04.ttc.com 2.6.17.11 #3 SMP Wed Oct 10 06:16:52 EDT 2007 x86_64 GNU/Linux<p>Linux root-desktop 2.6.31-16-generic #53-Ubuntu SMP Tue Dec 8 04:02:15 UTC 2009 x86_64 GNU/Linux<p>Linux eleven.ttc.com 2.6.15 #2 SMP Thu Mar 9 09:06:54 EST 2006 x86_64 GNU/Linux<p>Linux backup01.ttc.com 2.6.25-14.fc9.x86_64 #1 SMP Thu May 1 06:06:21 EDT 2008 x86_64 x86_64 x86_64 GNU/Linux<p>On the last one it exits with 'symbol table not available, aborting!'.<p>Off-topic, how many of you actually review a program like this before running it?
评论 #1707294 未加载
评论 #1707487 未加载
评论 #1707325 未加载
评论 #1707296 未加载
jseanover 14 years ago
How come Robert sucks?<p>edit: ok, if you didn't notice source's filename; <a href="http://sota.gen.nz/compat2/robert_you_suck.c" rel="nofollow">http://sota.gen.nz/compat2/robert_you_suck.c</a><p>And just in case... also ;)
评论 #1707312 未加载
评论 #1707246 未加载
评论 #1707322 未加载
rbanffyover 14 years ago
Anyone would like to explain why stuff like this is not automatically tested? Introducing tests into the kernel source tree would actually help its development and prevent incidents like this, wouldn't it?
评论 #1708035 未加载
评论 #1708315 未加载
jrockwayover 14 years ago
Incidentally, there are several buffer overflow errors in the exploit code.
评论 #1709490 未加载
bustamoveover 14 years ago
just tried the exploit on my slicehost box and it successfully root it!
bustamoveover 14 years ago
~# uname -a Linux slice<i></i><i></i> 2.6.32.12-rscloud #26 SMP Mon May 17 12:35:34 UTC 2010 x86_64 GNU/Linux