public inbox for linux-kernel@vger.kernel.org
 help / color / mirror / Atom feed
From: Michael Gilbert <michael.s.gilbert@gmail.com>
To: linux-kernel@vger.kernel.org
Subject: CVE-2009-2584
Date: Wed, 4 Nov 2009 17:05:42 -0500	[thread overview]
Message-ID: <20091104170542.e40b12ec.michael.s.gilbert@gmail.com> (raw)

Hi,

CVE-2009-2584 [0],[1] has been disclosed for quite a while now (with
existing exploit code by Brad Spengler [2]).  A patch has also been
available for the same amount of time [3], but as of 2.6.32-rc6 it is 
still not applied.  Did this slip through the cracks?  Thanks upfront
for any info on the matter.

Best wishes,
Mike

[0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2584
[1] http://xorl.wordpress.com/2009/07/21/linux-kernel-sgi-gru-driver-off-by-one-overwrite/
[2] http://grsecurity.net/~spender/exploit_demo.c
[3] http://lkml.org/lkml/2009/7/20/348

             reply	other threads:[~2009-11-04 22:00 UTC|newest]

Thread overview: 14+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2009-11-04 22:05 Michael Gilbert [this message]
2009-11-04 22:08 ` CVE-2009-2584 Justin P. Mattock
2009-11-04 22:21   ` CVE-2009-2584 Michael Gilbert
2009-11-04 22:49     ` CVE-2009-2584 Justin P. Mattock
2009-11-05 15:27 ` CVE-2009-2584 Jiri Kosina
2009-11-05 16:32   ` CVE-2009-2584 Linus Torvalds
2009-11-05 17:38     ` CVE-2009-2584 Linus Torvalds
2009-11-05 17:47       ` CVE-2009-2584 Linus Torvalds
2009-11-05 17:47       ` CVE-2009-2584 Michael Buesch
2009-11-05 18:16         ` CVE-2009-2584 Jack Steiner
2009-11-05 18:22           ` CVE-2009-2584 Linus Torvalds
2009-11-05 18:41             ` CVE-2009-2584 Jack Steiner
2009-11-05 18:19         ` CVE-2009-2584 Linus Torvalds
2009-11-05 17:56       ` CVE-2009-2584 Roland Dreier

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20091104170542.e40b12ec.michael.s.gilbert@gmail.com \
    --to=michael.s.gilbert@gmail.com \
    --cc=linux-kernel@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox