Linux Kernel Random Number Generator flaw

According to security researchers, the Linux kernel is prone to a local vulnerability that may result in a DoS or privilege escalation, possibly allowing the attackers to run arbitrary code on the target system. This issue stems from a stack-based overflow in kernel memory; if uccessfully exploited this issue allows local attackers to trigger kernel crashes and, in certain circumstances, also allows them to gain elevated privileges. However, the attacker may require partial administrative access via granular assignments of superuser privileges. Linux kernel versions prior to 2.6.22.3 are affected by this issueNews Source: securityfocus.com Read full story...

 


http://feeds.feedburner.com/~r/neowin-main/~3/189641509/linux-kernel-random-number-generator-flaw