[Sysadmins] SI: e100 => local kernel privilege escalation

[Michael Shigorin]

Summary:
A vulnerability exists in all PCI, PCI-X and PCIe Intel network
adapter drivers that could allow unprivileged code executing on
an affected system to perform a local privilege escalation.

Description:
This vulnerability is due to a buffer overflow that could be
caused by incorrect use of a function call. This condition could
allow unauthorized code to be introduced that could be run with
kernel-level privileges.

e100:  vulnerable <= 3.5.14, fixed >= 3.5.17
e1000: vulnerable <= 7.2.7,  fixed >= 7.3.15

http://www.intel.com/support/network/sb/CS-023726.htm

2 vsu: получится ли выпустить обновление ядра для ALM2.4?
(или самому собирать vs-smp)

-- 
 ---- WBR, Michael Shigorin <mike на altlinux.ru>
  ------ Linux.Kiev http://www.linux.kiev.ua/
----------- следующая часть -----------
Было удалено вложение не в текстовом формате...
Имя     : =?iso-8859-1?q?=CF=D4=D3=D5=D4=D3=D4=D7=D5=C5=D4?=
Тип     : application/pgp-signature
Размер  : 189 байтов
Описание: =?iso-8859-1?q?=CF=D4=D3=D5=D4=D3=D4=D7=D5=C5=D4?=
Url     : <http://lists.altlinux.org/pipermail/sysadmins/attachments/20061207/cde26bec/attachment-0003.bin>