[lttng-dev] [RELEASE] LTTng-modules 2.9.6 and 2.10.3 (Linux kernel tracer)

Mathieu Desnoyers mathieu.desnoyers at efficios.com
Fri Nov 3 21:33:11 UTC 2017


Hi,

Versions 2.9.6 and 2.10.3 fix an input validation issue with
the /proc/lttng-logger interface of lttng-modules. An ill-crafted input
to the write system call to /proc/lttng-logger can trigger a kernel OOPS.

Given that all users can write to that file, it means that arbitrary
local users can trigger a kernel OOPS. It would be preferable to
upgrade your lttng-modules to a version containing this fix.

Thanks,

Mathieu

Project website: http://lttng.org
Documentation: http://lttng.org/docs
Download link: http://lttng.org/download

Changelog:
2017-11-03 (National Sandwich Day) LTTng modules 2.9.6
        * Fix: lttng-logger get_user_pages_fast error handling

2017-11-03 (National Sandwich Day) LTTng modules 2.10.3
        * Fix: lttng-logger get_user_pages_fast error handling


-- 
Mathieu Desnoyers
EfficiOS Inc.
http://www.efficios.com


More information about the lttng-dev mailing list