Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Slackware 9.1: 2004-049-01 Moderate: Kernel mremap() Privilege Escalation

slackware
Calendar Grey February 18, 2004
Dist Slackware Esm H88
Recent Slackware kernel updates fix a vulnerability in the mremap() function that may enable local privilege escalation. Apply these updates promptly
New kernels are available for Slackware 9.1 and -current to fix a bounds-checking problem in the kernel's mremap() call which could be used by a local attacker to gain root privile...

Summary

Here are the details from the Slackware 9.1 ChangeLog: Wed Feb 18 03:44:42 PST 2004 patches/kernels/: Recompiled to fix another bounds-checking error in the kernel mremap() code. (this is not the same issue that was fixed on Jan 6) This bug could be used by a local attacker to gain root privileges. Sites should upgrade to a new kernel. After installing the new kernel, be sure to run 'lilo'. For more details, see: https://www.cve.org/CVERecord?id=CVE-CAN-2004-0077 Thanks to Paul Starzetz for finding and researching this issue. (* Security fix *) patches/packages/kernel-ide-2.4.24-i486-2.tgz: Patched, recompiled. (* Security fix *) patches/packages/kernel-source-2.4.24-noarch-2.tgz: Patched the kernel source with a fix for the mremap() problem from Solar Designer, and updated the Speakup driver (not pre-applied). (* Security fix *) WHERE TO FIND THE NEW PACKAGES: Updated packages for Slackware 9.1: An alternate kernel may be installed. Those

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory kernel update privilege escalation security fix Slackware local attacker

Where Find New Packages

MD5 Signatures

Severity
important
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory kernel update privilege escalation security fix Slackware local attacker

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Your message here