Messages in this thread | | | Date | Wed, 4 Nov 2009 17:05:42 -0500 | From | Michael Gilbert <> | Subject | CVE-2009-2584 |
| |
Hi,
CVE-2009-2584 [0],[1] has been disclosed for quite a while now (with existing exploit code by Brad Spengler [2]). A patch has also been available for the same amount of time [3], but as of 2.6.32-rc6 it is still not applied. Did this slip through the cracks? Thanks upfront for any info on the matter.
Best wishes, Mike
[0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2584 [1] http://xorl.wordpress.com/2009/07/21/linux-kernel-sgi-gru-driver-off-by-one-overwrite/ [2] http://grsecurity.net/~spender/exploit_demo.c [3] http://lkml.org/lkml/2009/7/20/348
| |