3 ms·

At least these (seem to) result in a kernel panic instead of privileged escalation or reading unauthorized memory. But in a world where even djbdns had a (mino

by PeCaN 10y ago

At least these (seem to) result in a kernel panic instead of privileged escalation or reading unauthorized memory. But in a world where even djbdns had a (minor) security issue, I don't think it's reasonable to expect any non-trivial software—particularly software written in C—to be fully secure.

caf 10y ago
The mmap_panic one does seem to have the possibility of privilege escalation.
ams6110 10y ago
I found it interesting that most of the patches are one or two line changes. Shows how one tiny oversight can open up a DoS or security vulnerablity.