Local Root Exploit in Udev
The udev subsystem allows the Linux kernel, together with a userland program, to manage device nodes dynamically, adding and removing them at will. It has now been revealed that the communication channel between the kernel and program fails to authenticate, so that users can assume root privileges.
The udev subsystem and the udevd daemon communicate in userspace over the netlink interface. Sending KOBJECT_UEVENT messages unfortunately doesn't verify who sent them. The result is that normal users can assume read privileges for a random device. If the device has a major and minor number of the root block device, invasive code can be applied to alter the system. A root exploit could then be quite simple for an attacker.
The root exploit was discovered by Sebastian Krahmer of the SUSE Security Team, which had become apprised of the CVE-2009-1185 spoofing exposure. The udev “trickery" exploit also points to another vulnerability in the CVE-2009-1186 stack buffer overflow exposure. Unfortunately, MITRE has not released further details on these vulnerabilities. All larger Linux distros have openly declared to be affected by them, so the distros are now providing updated packages.
Issue 212/Features
Buy this issue as a PDF
News
-
GitLabs Drops Pricing after Microsoft, GitHub Acquisition
GitLabs is creating more incentives for users to switch from GitHub.
-
KDE Plasma 5.13 Is Here
The desktop environment is designed to be more resource efficient.
-
SUSE Forks Red Hat’s Spacewalk Project
SUSE relies heavily on the project for its own SUSE Manager.
-
openSUSE Leap 15 Announced
The release was announced at the openSUSE Conference in Prague, Czech Republic.
-
SoftMaker FreeOffice 2018 for Linux
SoftMaker Software GmbH has announced FreeOffice 2018, a free of cost office suite for Linux.
-
A New CentOS
Latest version of the community Linux based on Red Hat Enterprise Linux 7.5
-
Ubuntu 18.04 Released
“Bionic Beaver” comes with hardware-focused improvements and Gnome as the default shell.
-
Richard Stallman Calls Azure Sphere OS a Positive Step
Stallman is glad that Microsoft will respect user’s freedom.
-
Red Hat Enterprise Linux 7.5 Released
The latest release is focused on hybrid cloud.
-
Microsoft Releases a Linux-Based OS
The company is building a new IoT environment powered by Linux.