[lttng-dev] [RELEASE] LTTng-modules 2.9.6 and 2.10.3 (Linux kernel tracer)
Mathieu Desnoyers
mathieu.desnoyers at efficios.com
Fri Nov 3 21:33:11 UTC 2017
Hi,
Versions 2.9.6 and 2.10.3 fix an input validation issue with
the /proc/lttng-logger interface of lttng-modules. An ill-crafted input
to the write system call to /proc/lttng-logger can trigger a kernel OOPS.
Given that all users can write to that file, it means that arbitrary
local users can trigger a kernel OOPS. It would be preferable to
upgrade your lttng-modules to a version containing this fix.
Thanks,
Mathieu
Project website: http://lttng.org
Documentation: http://lttng.org/docs
Download link: http://lttng.org/download
Changelog:
2017-11-03 (National Sandwich Day) LTTng modules 2.9.6
* Fix: lttng-logger get_user_pages_fast error handling
2017-11-03 (National Sandwich Day) LTTng modules 2.10.3
* Fix: lttng-logger get_user_pages_fast error handling
--
Mathieu Desnoyers
EfficiOS Inc.
http://www.efficios.com
More information about the lttng-dev
mailing list