for the record [LWN.net]

for the record

Posted Feb 23, 2008 22:06 UTC (Sat) by gvy (guest, #11981)
In reply to: distro update progress by dougg
Parent article: vmsplice(): the making of a local root exploit

* Sun Feb 10 2008 Sergey Vlasov <vsu@altlinux> 2.6.18-alt12
- Security-related changes:
  + CVE-2008-0600: splice: fix user pointer access in get_iovec_page_array()
  + check iovec buffers in __bio_map_user_iov() (fixes issue with SG_IO)
  + guard against attempts to call get_user_pages() for 0 pages

(Log in to post comments)