4 ms·

On a git repo that has as remotes https://github.com/torvalds/linux.git https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git as remotes: r

by nh2 5mo ago

On a git repo that has as remotes https://github.com/torvalds/linux.git https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git as remotes: running a search for commit a664bf3d603d's commit message: git log --all --grep 'crypto: algif_aead - Revert to operating out-of-place' '--format=%H' | xargs -I '{}' git tag --contains '{}' | sort -u outputs these tags as having the fix: v6.18.22 v6.18.23 v6.18.24 v6.18.25 v6.19.12 v6.19.13 v6.19.14 v7.0 v7.0.1 v7.0.2 v7.0-rc7 v7.1-rc1

rcxdude 5mo ago
distros might also apply patches to their own packages, so this isn't a perfect signal (i.e. if you have one of those versions, you almost certainly have the fix, but if you don't, it might still be fixed but you'll need to check the distro's package information to know for sure).
bombcar 5mo ago
Here's the diff if you wanna play in your source (Gentoo, looking at you): https://github.com/torvalds/linux/commit/a664bf3d603d https://github.com/torvalds/linux/commit/a664bf3d603d 6.18.25-gentoo-x86_64 has the patch for Gentoo.
- zepearl 5mo ago
  Thanks a lot!!! I was running in Gentoo "6.18.18" (amd64) and the exploit worked (and all other shells which I PREVIOUSLY opened could then just execute "su -" without password to become "root") -> doing temporarily a "modprobe -r algif_aead" on-the-fly did not fix it as I was still able to swap to "root" from the unprivileged user by executing just "su -". "6.18.25" fixed it (module "algif_aead" still running). - Maybe older Kernel versions that don't contain the fix should be blacklisted? - FYI in Gentoo I had to recompile "sys-fs/zfs-kmod" after the minor kernel upgrade (I initially skipped it, but after rebooting with the new kernel I could not mount my raidz1) -> the same might be needed for other external modules.
  - bombcar 5mo ago
    Yeah in theory genkernel should handle zfs but since I’m zfs_on_root because I like living dangerously I have a one liner that genkernels and then re-emerges zfs and then rebuilds the initramfs.
senectus1 5mo ago
Just curious.. do they list all those kernel version because there is regression in versions after 6.18.22 ? ie does v 6.19.0 have the flaw in it?
- sjagoe 5mo ago
  No, it was fixed initially in 7.0, and the patch then applied to the 6.18 and 6.19 branches, fixing the existing bug in versions 6.18.22 and 6.19.12. The bug exists in 6.19.0 to 6.19.11, but not as a regression - those were all released before the bug was fixed.

by nh2 5mo ago

rcxdude 5mo ago

distros might also apply patches to their own packages, so this isn't a perfect signal (i.e. if you have one of those versions, you almost certainly have the fix, but if you don't, it might still be fixed but you'll need to check the distro's package information to know for sure).

bombcar 5mo ago

Here's the diff if you wanna play in your source (Gentoo, looking at you): https://github.com/torvalds/linux/commit/a664bf3d603d https://github.com/torvalds/linux/commit/a664bf3d603d 6.18.25-gentoo-x86_64 has the patch for Gentoo.

zepearl 5mo ago
Thanks a lot!!! I was running in Gentoo "6.18.18" (amd64) and the exploit worked (and all other shells which I PREVIOUSLY opened could then just execute "su -" without password to become "root") -> doing temporarily a "modprobe -r algif_aead" on-the-fly did not fix it as I was still able to swap to "root" from the unprivileged user by executing just "su -". "6.18.25" fixed it (module "algif_aead" still running). - Maybe older Kernel versions that don't contain the fix should be blacklisted? - FYI in Gentoo I had to recompile "sys-fs/zfs-kmod" after the minor kernel upgrade (I initially skipped it, but after rebooting with the new kernel I could not mount my raidz1) -> the same might be needed for other external modules.
- bombcar 5mo ago
  Yeah in theory genkernel should handle zfs but since I’m zfs_on_root because I like living dangerously I have a one liner that genkernels and then re-emerges zfs and then rebuilds the initramfs.

senectus1 5mo ago

Just curious.. do they list all those kernel version because there is regression in versions after 6.18.22 ? ie does v 6.19.0 have the flaw in it?

sjagoe 5mo ago
No, it was fixed initially in 7.0, and the patch then applied to the 6.18 and 6.19 branches, fixing the existing bug in versions 6.18.22 and 6.19.12. The bug exists in 6.19.0 to 6.19.11, but not as a regression - those were all released before the bug was fixed.