Linked by Jordan Spencer Cunningham on Fri 14th Aug 2009 02:29 UTC
Permalink for comment 378457
To read all comments associated with this story, please click here.
To read all comments associated with this story, please click here.





Member since:
2005-07-06
More recent kernels have a protection against this exploit, if they contain the mmap_min_addr feature is set correctly.
You can check your kernel via this:
# cat /proc/sys/vm mmap_min_addr
65536
While we have not gotten any official word from Redhat, I did some spot checking and it looks like RHEL 4.8, RHEL 5.2, and RHEL 5.3 have this parameter set correctly.
But, beware, any use of SELinux will bypass the protections given by this kernel feature.