View Single Post

   
  #4 (permalink)  
Old 02-21-2008, 04:47 AM
Lew Pitcher
 
Posts: n/a
Default Re: Current Kernel Exploit - Explaination?!?!?!

On Feb 14, 2:23 pm, Doug Mitton <doug_mit...@hotmail.x.com> wrote:
> Grant <g_r_a_n...@dodo.com.au> wrote:
> >On Tue, 12 Feb 2008 23:38:13 +0000 (UTC), Doug Mitton <doug_mit...@hotmail.x.com> wrote:

>
> >>I'm running a custom made kernel 2.6.24.

>
> >Update to 2.6.24.2 for the fix.

>
> >...
> >>[-] vmsplice: No such file or directory
> >><P4>dmitton:~/exploit080212$

>
> >Yeah, the exploit failed here too, I updated the kernel to be on
> >the safe side.

>
> >Grant.

>
> Thanks! I installed kernel 2.6.24.2 and have the same response to the
> `exploit` command. I'll have to keep looking for an explaination of
> the issue from a "technical" perspective. Maybe I'm not even using
> the feature.


As I understand it, the vmsplice() syscall is only available if you've
enabled virtualization support in the kernel. If you haven't compiled
your kernel with KVM enabled, you are safe from this exploit.


Reply With Quote