:: Re: [DNG] Beware
Inizio della pagina
Delete this message
Reply to this message
Autore: Rainer Weikusat
Data:  
To: dng
Oggetto: Re: [DNG] Beware
Adam Borowski <kilobyte@???> writes:
> On Tue, Jan 19, 2016 at 04:09:10PM +0000, Rainer Weikusat wrote:
>> Steve Litt <slitt@???> writes:
>> > Beware:
>> >
>> > http://www.networkworld.com/article/3023447/security/linux-zero-day-affects-most-androids-millions-of-linux-pcs.html
>>
>> Just another local privilege escalation. May enable users to gain
>> control of their own Android devices (imminent end of the world
>> predicted!) and affect setups where untrusted users are able to execute
>> arbitrary code as themselves.
>
> While rooting locked-down Androids is a good think, one shouldn't play down
> the severity of local exploits.


In this particular case, an unprivileged local user could gain root
access by running a program which does billions of syscalls as fast as
it can for ca 30 minutes (according the 'real' article).

And "affects most androids and millions of Linux PCs" is a way
overdramatized headline for that.

"Linux kernel bug fixed" would be more appropriate.