Linux内核 Radeon DRI驱动 任意代码漏洞

Linux内核2.6.8.1的Radeon DRI驱动中存在竞争状态，具有DRI权限的本地用户可以root执行任意代码。

目前厂商已经发布了升级补丁以修复这个安全问题，补丁下载链接：
Linux kernel 2.6.10 rc2
Linux patch-2.6.11-rc4.bz2
http://kernel.org/pub/linux/kernel/v2.6/testing/patch-2.6.11-rc4.bz2
Linux kernel 2.6.10
Linux patch-2.6.11-rc4.bz2
http://kernel.org/pub/linux/kernel/v2.6/testing/patch-2.6.11-rc4.bz2
Linux kernel 2.6.11 -rc3
Linux patch-2.6.11-rc4.bz2
http://kernel.org/pub/linux/kernel/v2.6/testing/patch-2.6.11-rc4.bz2
Linux kernel 2.6.11 -rc2
Linux patch-2.6.11-rc4.bz2
http://kernel.org/pub/linux/kernel/v2.6/testing/patch-2.6.11-rc4.bz2
Linux kernel 2.6.4
SuSE kernel-bigsmp-2.6.5-7.151.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/kernel-bigsmp-2.6 .5-7.151.i586.rpm
SuSE kernel-default-2.6.5-7.151.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/kernel-default-2. 6.5-7.151.i586.rpm
SuSE kernel-default-2.6.5-7.151.x86_64.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/kernel-defaul t-2.6.5-7.151.x86_64.rpm
SuSE kernel-docs-2.6.5-7.151.noarch.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/noarch/kernel-docs-2.6 .5-7.151.noarch.rpm
SuSE kernel-smp-2.6.5-7.151.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/kernel-smp-2.6.5- 7.151.i586.rpm
SuSE kernel-smp-2.6.5-7.151.x86_64.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/kernel-smp-2. 6.5-7.151.x86_64.rpm
SuSE kernel-source-2.6.5-7.151.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/kernel-source-2.6 .5-7.151.i586.rpm
SuSE kernel-source-2.6.5-7.151.x86_64.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/kernel-source -2.6.5-7.151.x86_64.rpm
SuSE kernel-syms-2.6.5-7.151.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/kernel-syms-2.6.5 -7.151.i586.rpm
SuSE kernel-syms-2.6.5-7.151.x86_64.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/kernel-syms-2 .6.5-7.151.x86_64.rpm
SuSE ltmodem-2.6.2-38.14.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/ltmodem-2.6.2-38. 14.i586.rpm

来源: UBUNTU
名称: USN-95-1
链接:http://www.ubuntulinux.org/support/documentation/usn/usn-95-1

来源: REDHAT
名称: RHSA-2005:366
链接:http://www.redhat.com/support/errata/RHSA-2005-366.html

来源: CONECTIVA
名称: CLA-2005:945
链接:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000945