A bug in linux kernel

Submitted by admin on 14 August 2009 - 11:27pm
All linux kernels released over the past few years have a bug allowing a user to obtain the rights of the root.

The bug is serious and is related to so-called void pointers. By default, the structure of each pointer defines which operations are carried out by the socket. If the operation is not implemented, the pointer should point to a previously defined function such as sock_no_accept (). Despite this, some pointers remain uninitialized. This, in turn, can be used to obtain root's privileges.

The bug applies to the following protocols: PF_BLUETOOTH, PF_IUCV, PF_INET6 (with IPPROTO_SCTP), PF_PPPOX and PF_ISDN in all kernel versions older than 2.6.30.2 . The official patch is not available yet.