Dirty Cow fix?

[hnt2507]

Kernel exploit

[morten]

Hello,

Is https://bugzilla.redhat.com/show_bug.cgi?id=1384344 patched?
More information also available here:

https://dirtycow.ninja/

[mtindor]

m not too bright, but the "mitigation" Ive read about states that it disables ptrace.

I wonder if having "kernel.user_ptrace = 0" in /etc/sysctl.conf is enough to mitigate this on CL servers.

Mike

[bogdan.sh]

Hi,

Yes, disabling ptrace could help here, however with our tests its a bit broken. We are working to to release patched kernels and they will be available soon.

[stephan]

Can you tell us more about the impact?

I am using CageFS everywhere and all users are in LVE.

I am unable to reproduce the bug:

bash-4.1$ cat foo
this is not a test
bash-4.1$ ./dirtyc0w foo m00000000000000000
mmap cd95a000

madvise 0

procselfmem -100000000

bash-4.1$ cat foo
this is not a test

[clm]

It doesn affect Redhat 5 or Redhat 6 with default configuration, only Redhat 7, So I presume that its the same for CloudLinux and that only version 7 is vulnerable.