Linux kernel local privilege escalation

In case you’ve been wondering about the slightly dubious announcements of the past few days: on Friday (2009/08/14) a local privilege escalation in all Linux kernels of the last 7 years was published, together with an exploit. Unfortunately no patched kernels were available by Friday late afternoon, which put us into an awkward position. Generally it is not our policy to be sneaky about security issues, but in this case we really did not want to attract malicious script kiddies. That’s why we decided to keep our announcements somewhat vague. By now the worst seems to be over and all machines have been rebooted with patched kernels.

We apologize for any confusion or service degradation this episode may have caused on your side.

Tags: , , , ,