> > That's awesome. :)  Does 2.6.20-1 reproduce the bug, too?

It does indeed yes.

> > That range points to
> > 
> >   * NET: Add preemption point in qdisc_run (CVE-2008-5713)
> 
> This just made the existing race conditions in the driver easier to hit.

Just as with the 2.6.18 kernel it takes quite some time/traffic to produce the 
bug, on the 2.6.32 and 3.2.0 kernels it happens much faster.

> > which is commit v2.6.25-rc9~99^2~24 (2008-03-28) upstream as the
> > triggering change.  Old kernels can be found at
> > http://snapshot.debian.org/ if you are curious about how any
> > particular one behaves.

Thanks for the pointer! much easier then searching iso's for the correct file :)

Mike.

                                          

Reply via email to