You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Al Viro 330d57fb98 [PATCH] Fix sysctl unregistration oops (CVE-2005-2709) ... You could open the /proc/sys/net/ipv4/conf/<if>/<whatever> file, then wait for interface to go away, try to grab as much memory as possible in hope to hit the (kfreed) ctl_table. Then fill it with pointers to your function. Then do read from file you've opened and if you are lucky, you'll get it called as ->proc_handler() in kernel mode. So this is at least an Oops and possibly more. It does depend on an interface going away though, so less of a security risk than it would otherwise be. Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de> Signed-off-by: Linus Torvalds <torvalds@osdl.org>		19 years ago
..
alpha	[PATCH] jiffies_64 cleanup	19 years ago
arm	Merge with ARM SMP tree	19 years ago
arm26	…
cris	[PATCH] kfree cleanup: arch	19 years ago
frv	…
h8300	…
i386	…
ia64	Auto-update from upstream	19 years ago
m32r	…
m68k	[PATCH] m68k: fix-up schedule_timeout() usage	19 years ago
m68knommu	…
mips	…
parisc	[PATCH] consolidate sys_ptrace()	19 years ago
powerpc	…
ppc	[PATCH] ppc: Fix ARCH=ppc build with xmon	19 years ago
ppc64	[PATCH] Memory Add Fixes for ppc64	19 years ago
s390	[PATCH] Fix sysctl unregistration oops (CVE-2005-2709)	19 years ago
sh	[PATCH] consolidate sys_ptrace()	19 years ago
sh64	…
sparc	…
sparc64	[SPARC64] mm: update get_user_insn comment	19 years ago
um	[PATCH] kfree cleanup: arch	19 years ago
v850	[PATCH] consolidate sys_ptrace()	19 years ago
x86_64	[PATCH] unexport phys_proc_id and cpu_core_id	19 years ago
xtensa	[PATCH] consolidate sys_ptrace()	19 years ago