3 ms·

Silent patched a while ago: Kernel must be compiled with PERF_EVENTS (default on most modern distros). Bug fixed in 3.8.10. This is the kill log: http://lkml

by ezdiy 13y ago

Silent patched a while ago: Kernel must be compiled with PERF_EVENTS (default on most modern distros). Bug fixed in 3.8.10. This is the kill log: http://lkml.indiana.edu/hypermail/linux/kernel/1304.1/04302.html http://lkml.indiana.edu/hypermail/linux/kernel/1304.1/04302.... This bug got apparently backported from 2.6.37 into centos6 2.6.32 kernels. patch here: https://patchwork.kernel.org/patch/2441281/ https://patchwork.kernel.org/patch/2441281/

calinet6 13y ago
The patch looks like it's present in 3.8.9 also, correct? (someone double-check)
- ezdiy 13y ago
  You're correct. Bug is in 2.6.37-3.8.8, fixed in 3.8.9. http://lxr.linux.no/linux+v3.8.9/kernel/events/core.c#L5331 http://lxr.linux.no/linux+v3.8.9/kernel/events/core.c#L5331
ezdiy 13y ago
Spender did excellent write-up about how it exactly works: http://www.reddit.com/r/netsec/comments/1eb9iw/sdfucksheeporgs_semtexc_local_linux_root_exploit/c9ykrck http://www.reddit.com/r/netsec/comments/1eb9iw/sdfucksheepor...