Re: [opensuse] Kernel Security Issue On 11/02/2008, Samuel Honorato  wrote:
> A new root exploit was created, and all users who use the kernel version:
>  2.6.17 - 2.6.24.1 are vulnerable.
>
>  The report:
>  http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=464953
>
>  The exploit:
>  http://www.milw0rm.com/exploits/5092
>
>  To fix:
>  http://www.ping.uio.no/~mortehu/disable-vmsplice-if-exploitable.c

This "fix" may cause undefined behaviour or crashes. I suggest you get
your information from opensuse-security-announce instead.
http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00004.html

It's also not generally considered good form to publicise exploits
before official patches are released. Though in this case it had
already been widely publicised anyway.

--
Benjamin Weber


