Interesting kernel exploit posted

Posted Dec 8, 2010 16:04 UTC (Wed) by ctg (guest, #3459)
In reply to: Interesting kernel exploit posted by SmittyBoy
Parent article: Interesting kernel exploit posted

You need the econet module loaded. Which is pretty obscure. Don't know if the same issue is in other, more common, modules...

Interesting kernel exploit posted

Posted Dec 8, 2010 16:08 UTC (Wed) by nelhage (subscriber, #59579) [Link]

You need the econet module loaded, but most kernels today (including, for instance, nearly all current Ubuntu kernels) will automatically load it if anyone, even an unprivileged user, attempts to create an AF_ECONET socket.

Interesting kernel exploit posted

Posted Dec 8, 2010 17:18 UTC (Wed) by tialaramex (subscriber, #21167) [Link]

The POC as it stands is enough to demonstrate this problem and hopefully get it fixed promptly. Altering it to use other bugs in more widespread code while undoubtedly possible is besides the point unless you're a black hat.