|
|
Subscribe / Log in / New account

This isn't fixed until the compilers are

This isn't fixed until the compilers are

Posted Jul 4, 2017 3:15 UTC (Tue) by Aaron1011 (guest, #115128)
In reply to: This isn't fixed until the compilers are by dlang
Parent article: Ripples from Stack Clash

> If there is a way to crash/corrupt your machine from a sequence of instructions, attackers will use asm() to insert those specific instructions

Stack Clash isn't a vulnerability in the kernel - it's a vulnerability that allows an attacker to gain control over a process that they wouldn't normally be able to (e.g. a guid/suid'd program like 'sudo'). The kernel change simply makes it less likely for this kind of vulnerability to be exploited (though stack probing is needed to truly fix the issue).


to post comments


Copyright © 2025, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds