2.6 isn't vulnerable

Posted May 19, 2005 6:13 UTC (Thu) by gregkh (subscriber, #8)
Parent article: Responding to the kernel ELF vulnerability

The main reason there have not been any updates, is that there really isn't
a problem for the 2.6 kernel. The original author has admited this finally,
no one was ever able to reproduce it on a 2.6 kernel. The only reason I
released a kernel update, was at the time, we thought there was an
off-chance that there was a problem. However in further testing, it has not
been the case.

But the patch was a good one to have, to prevent any other types of this
kind of error in that same area, if some other attack vector like the
reported one were developed.

to post comments

2.6 isn't vulnerable

Posted May 19, 2005 6:59 UTC (Thu) by komarek (guest, #7295) [Link] (1 responses)

Comments and content like this from gregkh, are why I pay for and read LWN. How many slashdot posts would I have to read to get the same information, with the same confidence? Thanks corbet and gregkh for keep us all in-the-know.

2.6 isn't vulnerable

Posted May 19, 2005 7:22 UTC (Thu) by jhs (guest, #12429) [Link]

I actually specifically clicked on the comments just to post a similar message about the LWN content. So I guess I will put it here. The LWN kernel section is excellent.