|
Linux at risk from NULL security flaw |
|
Sunday, 16 August 2009 06:34 |
|
Linux users take note: we're all at risk from a kernel privilege escalation flaw. No it's not the end of the world, that will lead to massive remote exploits and all Linux servers being pwnd. But it is something to be concerned about. The flaw is a NULL pointer error that exists in all versions of the Linux kernel released since 2001. No that's not a typo. This is a flaw that potentially has been in Linux for eight years and has somehow escaped the 'many eyes' philosophy of finding security flaws. It has also somehow escaped the static analysis that is performed on the Linux kernel that is supposed to find such NULL pointer flaws. LINUX NEWS - FULL STORY
|