News for hackers. Stuff that matters.

A comment on Linux kernel: CVE-2017-6074: DCCP double-free vulnerability (local root). Parent comment

Re:Linux kernel: CVE-2017-6074: DCCP double-free vulnerabili... by geofft on Wednesday February 22, 2017 @01:27PM (#13707786)
If you're root, a local privilege escalation isn't going to get you any more privileges than you already have.

If you're root in a container, but not root on the outside system, you shouldn't be able to write to /proc/sys/kernel/modprobe, no?

[ Parent | on HN ]
Re:Linux kernel: CVE-2017-6074: DCCP double-free vulnerabili... by sdeziel on Wednesday February 22, 2017 @01:42PM (#13707957)
I just wanted to mention that the path to modprobe is something reversible (containers aside) if the sysadmin wants autoloading. /proc/sys/kernel/modprobe is not writable from a container.

Disabling module loading is not reversible, you need to reboot.

[ Parent | on HN ]