Kernel 2.6.25: 64 Bit Systems At Risk

Jul 14, 2008

Jan Rähm

The changelog for kernel 2.6.25.11 includes just a single entry, however, it seems to be so important that the Kernel Stable Team urgently advises users to upgrade the kernel on 64 bit multiple user systems.

The patch by Geman developer Michael Karcher remove an issue in the local descriptor table (ldt) on x86_64 systems. Details of the bug have not yet been disclosed. In his release announcement Greg Kroah-Hartman writes that systems with unrestricted user accounts should definitely be updated. It can be assumed that logged in users are able to escalate their privileges thanks to the bug.

A couple of days ago, the kernel 2.6.25.10 release removed two vulnerabilities both of which affected the x86_64 platform. The first bug affected several drivers and could be exploited to run arbitrary code, or crash the kernel. The second bug affected the "sys32_ptrace()" function in "arch/x86/kernel/ptrace.c" and could cause an overflow of the "refcount" field in the "task_struct" structure, thus causing a number of system errors.

The bugs affect all 2.6.25 series kernels. The kernel development team urgently advises users to install patches.

Related content

Linux 2.6.25 without Closed Source USB Drivers

A controversial patch for the imminent kernel 2.6.25 is causing much debate in the developer community: in a similar move to one he made two years ago, the well-known kernel developer Greg Kroah-Hartman has submitted a patch that prevents closed source USB drivers from using the kernel's USB driver API.

more »
Torvalds Releases Kernel 2.6.25: GPL Only Restriction Imposed

Linus Torvalds has released the new 2.6.25 kernel just slightly behind schedule. Besides improvements to the CFS scheduler and a plethora of new drivers, the kernel also introduces a political aspect: it debars non-GPLd USB drivers.

more »
Local Vulnerabilities in Current Kernels

Recent kernel versions back to the older kernel 2.6.17 may contain a vulnerability that can be exploited by local attackers.

more »
Linus Torvalds: Kernel 2.6.25-rc1 "Bloody Large"

Linus Torvalds has announced the first release candidate of the new 2.6.25 kernel, codenamed "Bloody Large".

more »
Stable Kernel 2.6.22.2 Released

The new kernel release includes bugfixes and security updates.

more »

comments powered by Disqus

Issue 269/2023

Buy this issue as a PDF

Digital Issue: Price $12.99

(incl. VAT)

Subscribe to our Linux Newsletters
Find Linux and Open Source Jobs
Subscribe to our ADMIN Newsletters
Find SysAdmin Jobs

News

Kubuntu Focus Announces XE Gen 2 Linux Laptop

Another Kubuntu-based laptop has arrived to be your next ultra-portable powerhouse with a Linux heart.
MNT Seeks Financial Backing for New Seven-Inch Linux Laptop

MNT Pocket Reform is a tiny laptop that is modular, upgradable, recyclable, reusable, and ships with Debian Linux.
Ubuntu Flatpak Remix Adds Flatpak Support Preinstalled

If you're looking for a version of Ubuntu that includes Flatpak support out of the box, there's one clear option.
Gnome 44 Release Candidate Now Available

The Gnome 44 release candidate has officially arrived and adds a few changes into the mix.
Flathub Vying to Become the Standard Linux App Store

If the Flathub team has any say in the matter, their product will become the default tool for installing Linux apps in 2023.
Debian 12 to Ship with KDE Plasma 5.27

The Debian development team has shifted to the latest version of KDE for their testing branch.
Planet Computers Launches ARM-based Linux Desktop PCs

The firm that originally released a line of mobile keyboards has taken a different direction and has developed a new line of out-of-the-box mini Linux desktop computers.
Ubuntu No Longer Shipping with Flatpak

In a move that probably won’t come as a shock to many, Ubuntu and all of its official spins will no longer ship with Flatpak installed.
openSUSE Leap 15.5 Beta Now Available

The final version of the Leap 15 series of openSUSE is available for beta testing and offers only new software versions.
Linux Kernel 6.2 Released with New Hardware Support

Find out what's new in the most recent release from Linus Torvalds and the Linux kernel team.