• info
• discussion
• exploit
• solution
• references

Linux Kernel MIPS Ptrace Local Privilege Escalation Vulnerability

Solution:
Please see the referenced advisories for information on obtaining and applying the appropriate updates.


Linux kernel 2.4.16

• Debian kernel-doc-2.4.16_2.4.16-1woody2_all.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/k/kernel-source-2.4.16/ke rnel-doc-2.4.16_2.4.16-1woody2_all.deb


• Debian kernel-doc-2.4.16_2.4.16-1woody3_all.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/k/kernel-source-2.4.16/ke rnel-doc-2.4.16_2.4.16-1woody3_all.deb


• Debian kernel-headers-2.4.16_20040419_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.16-net winder/kernel-headers-2.4.16_20040419_arm.deb


• Debian kernel-headers-2.4.16_20040419woody1_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.16-net winder/kernel-headers-2.4.16_20040419woody1_arm.deb


• Debian kernel-image-2.4.16-lart_20040419_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.16-lar t/kernel-image-2.4.16-lart_20040419_arm.deb


• Debian kernel-image-2.4.16-lart_20040419woody1_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.16-lar t/kernel-image-2.4.16-lart_20040419woody1_arm.deb


• Debian kernel-image-2.4.16-netwinder_20040419_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.16-net winder/kernel-image-2.4.16-netwinder_20040419_arm.deb


• Debian kernel-image-2.4.16-netwinder_20040419woody1_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.16-net winder/kernel-image-2.4.16-netwinder_20040419woody1_arm.deb


• Debian kernel-image-2.4.16-riscpc_20040419_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.16-ris cpc/kernel-image-2.4.16-riscpc_20040419_arm.deb


• Debian kernel-image-2.4.16-riscpc_20040419woody1_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.16-ris cpc/kernel-image-2.4.16-riscpc_20040419woody1_arm.deb


• Debian kernel-patch-2.4.16-arm_20040419_all.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/k/kernel-patch-2.4.16-arm /kernel-patch-2.4.16-arm_20040419_all.deb


• Debian kernel-source-2.4.16_2.4.16-1woody2_all.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/k/kernel-source-2.4.16/ke rnel-source-2.4.16_2.4.16-1woody2_all.deb


• Debian kernel-source-2.4.16_2.4.16-1woody3_all.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/k/kernel-source-2.4.16/ke rnel-source-2.4.16_2.4.16-1woody3_all.deb

Linux kernel 2.4.18

• Debian kernel-headers-2.4.16_20040204_arm.deb
  ARM architecture.
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.16-net winder/kernel-headers-2.4.16_20040204_arm.deb


• Debian kernel-headers-2.4.18-sparc_22woody1_all.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/k/kernel-image-sparc-2.4/ kernel-headers-2.4.18-sparc_22woody1_all.deb


• Debian kernel-image-2.4.16-lart_20040204_arm.deb
  ARM architecture.
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.16-lar t/kernel-image-2.4.16-lart_20040204_arm.deb


• Debian kernel-image-2.4.16-netwinder_20040204_arm.deb
  ARM architecture.
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.16-net winder/kernel-image-2.4.16-netwinder_20040204_arm.deb


• Debian kernel-image-2.4.16-riscpc_20040204_arm.deb
  ARM architecture.
  http://security.debian.org/pool/updates/main/k/kernel-image-2.4.16-ris cpc/kernel-image-2.4.16-riscpc_20040204_arm.deb


• Debian kernel-image-2.4.18-sun4u-smp_22woody1_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/k/kernel-image-sparc-2.4/ kernel-image-2.4.18-sun4u-smp_22woody1_sparc.deb


• Debian kernel-image-2.4.18-sun4u_22woody1_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/k/kernel-image-sparc-2.4/ kernel-image-2.4.18-sun4u_22woody1_sparc.deb

Linux kernel 2.4.19

• Debian kernel-doc-2.4.19_2.4.19-4.woody3_all.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/k/kernel-source-2.4.19/ke rnel-doc-2.4.19_2.4.19-4.woody3_all.deb


• Debian kernel-headers-2.4.19-sparc_26woody1_all.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/k/kernel-image-sparc-2.4/ kernel-headers-2.4.19-sparc_26woody1_all.deb


• Debian kernel-headers-2.4.19_2.4.19-0.020911.1.woody5_mips.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/k/kernel-patch-2.4.19-mip s/kernel-headers-2.4.19_2.4.19-0.020911.1.woody5_mips.deb


• Debian kernel-image-2.4.19-r4k-ip22_2.4.19-0.020911.1.woody5_mips.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/k/kernel-patch-2.4.19-mip s/kernel-image-2.4.19-r4k-ip22_2.4.19-0.020911.1.woody5_mips.deb


• Debian kernel-image-2.4.19-r5k-ip22_2.4.19-0.020911.1.woody5_mips.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/k/kernel-patch-2.4.19-mip s/kernel-image-2.4.19-r5k-ip22_2.4.19-0.020911.1.woody5_mips.deb


• Debian kernel-image-2.4.19-sun4u-smp_26woody1_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/k/kernel-image-sparc-2.4/ kernel-image-2.4.19-sun4u-smp_26woody1_sparc.deb


• Debian kernel-image-2.4.19-sun4u_26woody1_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/k/kernel-image-sparc-2.4/ kernel-image-2.4.19-sun4u_26woody1_sparc.deb


• Debian kernel-patch-2.4.19-mips_2.4.19-0.020911.1.woody5_all.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/k/kernel-patch-2.4.19-mip s/kernel-patch-2.4.19-mips_2.4.19-0.020911.1.woody5_all.deb


• Debian kernel-source-2.4.19_2.4.19-4.woody3_all.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/k/kernel-source-2.4.19/ke rnel-source-2.4.19_2.4.19-4.woody3_all.deb


• Debian mips-tools_2.4.19-0.020911.1.woody5_mips.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/k/kernel-patch-2.4.19-mip s/mips-tools_2.4.19-0.020911.1.woody5_mips.deb