Re: A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill
oss-security thread proposes hashing sorted Module.symvers CRCs under CONFIG_MODVERSIONS to fix four Linux local root vulnerabilities without breaking module ABI.
A follow-up post on oss-security discusses remediation for four Linux local root vulnerabilities dubbed DirtyAH6, PPPoEject, TUNderflow, and DiagSpill. The author argues no new package manager features are needed, and that loose version matching plus local source rebuilds create real ABI breakage risk. The proposal is to hash a sorted version of CRCs from Module.symvers whenever CONFIG_MODVERSIONS is enabled, avoiding reliance on brittle text-based version strings.
- Thread covers fixes for four Linux local root flaws: DirtyAH6, PPPoEject, TUNderflow, DiagSpill
- Author says no new package manager features are needed for the fix
- Proposes hashing sorted Module.symvers CRCs when CONFIG_MODVERSIONS is enabled
- Warns loose version matching and local source rebuilds can break kernel module ABI
- Vendors
- Linux
- Products
- Linux kernelModule.symvers
- Organizations
- oss-security
From the original article
Posted by Greg Dahlman on Sep 19 I may be missing something but I do see a path that may be clean without inventing new package manager features or relying on brittle, text-based version strings. The concern regarding loose version matching and local source rebuilds breaking the ABI is real, but IMHO we don't need to invent a new package manager feature to fix it.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.