Исходное сообщение
"Разработчики Linux и Windows работают над закрытием огромной..." Отправлено RobotsCantPoop, 04-Янв-18 05:06
Ну с линуксом понятно, а как например с неткой обстоят дела? Это случаем не про это?         NetBSD Security Advisory 2018-001         ================================= Topic:        Several vulnerabilities in context handling Version:    NetBSD-current:        source prior to Sat, Sep 2nd 2017         NetBSD 7.1:        affected         NetBSD 7.0 - 7.0.2:    affected         NetBSD 6.1 - 6.1.4:    affected         NetBSD 6.0 - 6.0.5:    affected Severity:    Privilege escalation / Local DoS Fixed:        NetBSD-current:        Sat, Sep 2nd 2017         NetBSD-7-1 branch:    Sun, Oct 1st 2017         NetBSD-7-0 branch:    Sun, Oct 1st 2017         NetBSD-7 branch:    Sun, Oct 1st 2017         NetBSD-6-1 branch:    Fri, Oct 13th 2017         NetBSD-6-0 branch:    Fri, Oct 13th 2017         NetBSD-6 branch:    Fri, Oct 13th 2017 ... 2) The handling of the GDT on amd64 creates a condition where a page fault     can be generated if a segment register is reloaded with a "high" selector,     located near the end of the GDT. An incorrect check in a linux32 syscall     allowed unprivileged user processes to have the kernel page fault in such     a condition. However, the kernel does not correctly handle such exceptions:     it re-enters itself but does not switch to the kernel TLS, and instead uses     userland's. Userland therefore had a way to control a generic kernel     pointer, which allowed for full privilege escalation.