not new
not new
Posted Aug 18, 2009 16:35 UTC (Tue) by Trou.fr (subscriber, #26289)Parent article: Null pointers, one month later
Null pointer dereferences vulnerabilities are an old class of bugs, only recently measures have been taken in the mainline kernel to guard against their exploitation. An example from 2005 : http://lkml.org/lkml/2005/5/29/127
Also, PaX introduced UDEREF in 2006 to protect against it (note that it's not complete since the kernel can access code in userland, KERNEXEC protects against this).
The LWN site is currently under high scraper load, so comment display has been suppressed for anonymous users. If you are a human, you may read the comments by clicking the button below:
Note: you can avoid this step in the future by logging into your LWN account.