Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <20230725140904.GA8733@openwall.com>
Date: Tue, 25 Jul 2023 16:09:04 +0200
From: Solar Designer <solar@...nwall.com>
To: oss-security@...ts.openwall.com
Cc: Tamas Koczka <poprdi@...omium.org>
Subject: Re: Our learnings from 42 Linux kernel exploits, we are limiting io_uring

On Tue, Jul 25, 2023 at 02:31:55PM +0200, Marcus Meissner wrote:
> https://yanglingxi1993.github.io/dirty_pagetable/dirty_pagetable.html
> 
> has been updated with exploit information.
> 
> I tried to backtrack through kernel git to find the exact commit where
> this locking problem got fixed, but I gave up after a while after multiple
> refactoring (and a filemove) in the io_uring codel.

I guess it's this:

https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-5.15.y&id=fb348857e7b67eefe365052f1423427b66dedbf3

as mentioned in:

https://twitter.com/VAR10CK/status/1683303642173153280

Alexander

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.