|
|
Info |
Last Modified |
| about 1 year ago |
|
|
|
|
Keywords |
aka the MADV_REMOVE vulnerability
|
|
Description |
The Linux Kernel contains a flaw that may allow a malicious user to bypass IPC permissions. The issue is triggered because a 'madvise_remove' call does not follow file and mmap restrictions. It is possible that the flaw may allow an attacker to bypass IPC permissions and replace portions of readonly TMPFS files with zeroes, resulting in a loss of integrity.
|
|
Classification |
Location:
Local Access Required
Attack Type:
Other
Impact:
Loss of Integrity
Exploit:
Exploit Unknown
Disclosure:
OSVDB Verified
|
|
Solution |
Upgrade to version 2.6.16.7 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
|
|
Products |
|
Kernel
 |
2.6.16.5 |
2.6.16.6 |
2.6.16 |
2.6.16.1 |
2.6.16.2 |
2.6.16.3 |
2.6.16.4 |
|
|
|
|
|
|
Credit |
- Hugh Dickins - hugh
 veritas.com -
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
