Language Selection

English French German Italian Portuguese Spanish

Two Vulnerabilities Provide Root Access on Linux

Filed under
Linux
Security

Two new vulnerabilities affecting Linux were uncovered this week that could potentially be used by malicious hackers to gain root privileges.

One vulnerability, which was reported on Tuesday by security firm VSR, arises from a flaw in the implementation of the Reliable Datagram Sockets protocol (RDS) in versions 2.6.30 through 2.6.36-rc8 of the Linux kernel.

Known as CVE-2010-3904, the bug could allow a local attacker to issue specially crafted socket function calls to write arbitrary values into kernel memory and thereby escalate privileges to root, giving the attacker "superuser," administrator status.

rest here




Linux Kernel Update

pcworld.com: A new update to the Linux kernel adds a raft of security features, driver support, and other enhancements without increasing the overall size of the kernel at all.

That's a rarity, given that enhancements in each update have tended over the years to increase the kernel's size. This time around, though, there are a number of improvements that will be visible to users, but without any extra mass.

It won't be long before this new kernel is integrated into most popular Linux distributions. Here are some of the highlights of what users can expect.

Beefed Up Security

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.

More in Tux Machines

Ubuntu 15.10 (Wily Werewolf) to Ship with OpenStack Liberty

Canonical's James Page posted an interesting message on the Ubuntu mailing list, informing all Ubuntu developers about the steps they need to take in order to update the OpenStack cloud software to version 2015.2.0 (Liberty) in Ubuntu 15.10. Read more

Mark Shuttleworth Details Ubuntu 15.10 Highlights [VIDEO]

Ubuntu developers are closing in on the next major release, with the Ubuntu 15.10 Wily Werewolf set to debut on October 22. Ubuntu 15.10 is in many respects an incremental release ahead of the 16.04 Long Term Support release in 2016. Among the key innovations in 15.10 is wider use of the Snappy technology for packaging, though it won't replace the core .deb packaging system anytime soon, if ever. Read more

Improving Security for Bugzilla

Openness, transparency, and security are all central to the Mozilla mission. That’s why we publish security bugs once they’re no longer dangerous, and it’s why we’re writing a blog post about unauthorized access to our infrastructure. We have notified the relevant law enforcement authorities about this incident, and may take additional steps based on the results of any further investigations. Read more

RHEL 7.2 has an updated kernel target

As mentioned in the beta release notes, the kernel in RHEL 7.2 contains a rebased LIO kernel target, to the equivalent of the Linux 4.0.stable series. This is a big update. LIO has improved greatly since 3.10. It has added support for SCSI features that enable VMWare VAAI support, as well as data integrity (DIF), and significant iSER work, for those of you using Infiniband. (SRP is also supported, as well as iSCSI and FCoE, of course.) Read more