oss-sec mailing list archives
Re: Re: CVE-2016-8655 Linux af_packet.c race condition (local root)
From: Salvatore Bonaccorso <carnil () debian org>
Date: Wed, 7 Dec 2016 14:37:58 +0100
Hi Hanno, On Wed, Dec 07, 2016 at 02:15:15PM +0100, Hanno Böck wrote:
Hi, I'm running kernel 4.8.12, which has the fix you pointed out included, however:You can also run it with "crash" as the first argument to force a panic.running your code with the "crash" parameter reliably panics this kernel. This doesn't seem right. Is this an incomplete or nonworking fix?
The fix actually should not be included in 4.8.12. It is $ git describe --contains 84ac7260236a49c79eede91617700174c2c19b0c v4.9-rc8~5^2~14 Regards, hope this helps, Salvatore
Current thread:
- CVE-2016-8655 Linux af_packet.c race condition (local root) Philip Pettersson (Dec 05)
- Re: CVE-2016-8655 Linux af_packet.c race condition (local root) Philip Pettersson (Dec 06)
- Re: Re: CVE-2016-8655 Linux af_packet.c race condition (local root) Hanno Böck (Dec 07)
- Re: Re: CVE-2016-8655 Linux af_packet.c race condition (local root) Salvatore Bonaccorso (Dec 07)
- Re: Re: CVE-2016-8655 Linux af_packet.c race condition (local root) Brad Spengler (Dec 07)
- Re: Re: CVE-2016-8655 Linux af_packet.c race condition (local root) Hanno Böck (Dec 07)
- Re: CVE-2016-8655 Linux af_packet.c race condition (local root) Philip Pettersson (Dec 06)