All of lore.kernel.org
 help / color / mirror / Atom feed
* [diamon-discuss] [RELEASE] LTTng-modules 2.9.6 and 2.10.3 (Linux kernel tracer)
@ 2017-11-03 21:33 Mathieu Desnoyers
  0 siblings, 0 replies; only message in thread
From: Mathieu Desnoyers @ 2017-11-03 21:33 UTC (permalink / raw)
  To: lttng-dev, diamon-discuss

Hi,

Versions 2.9.6 and 2.10.3 fix an input validation issue with
the /proc/lttng-logger interface of lttng-modules. An ill-crafted input
to the write system call to /proc/lttng-logger can trigger a kernel OOPS.

Given that all users can write to that file, it means that arbitrary
local users can trigger a kernel OOPS. It would be preferable to
upgrade your lttng-modules to a version containing this fix.

Thanks,

Mathieu

Project website: http://lttng.org
Documentation: http://lttng.org/docs
Download link: http://lttng.org/download

Changelog:
2017-11-03 (National Sandwich Day) LTTng modules 2.9.6
        * Fix: lttng-logger get_user_pages_fast error handling

2017-11-03 (National Sandwich Day) LTTng modules 2.10.3
        * Fix: lttng-logger get_user_pages_fast error handling


-- 
Mathieu Desnoyers
EfficiOS Inc.
http://www.efficios.com

^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2017-11-03 21:33 UTC | newest]

Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2017-11-03 21:33 [diamon-discuss] [RELEASE] LTTng-modules 2.9.6 and 2.10.3 (Linux kernel tracer) Mathieu Desnoyers

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.