CentOS - Jan 2012 - Local privilege escalation bug in kernel

Do we know if this bug affects Centos?

http://www.techworld.com.au/article/413300/linux_vendors_rush_patch_privilege_escalation_flaw_after_root_exploits_emerge

The article states that it affects kernel 2.6.39 and above, but since RH
backports so much stuff I'm not sure if this would actually include the
Centos
kernels.

-- 
MELVILLE THEATRE ~ Real D 3D Digital Cinema ~ www.melvilletheatre.com
www.creekfm.com - FIFTY THOUSAND WATTS of POW WOW POWER!

>
> Do we know if this bug affects Centos?
>
The bug did not affect centos 5.

The bug did affect centos 6.

The fix from the upstream vendor was released on Monday afaik.

The centos update was released Tuesday evening.

James

Hi Frank, 
> Do we know if this bug affects Centos?
> 
>
http://www.techworld.com.au/article/413300/linux_vendors_rush_patch_privilege_escalation_flaw_after_root_exploits_emerge
> 
> The article states that it affects kernel 2.6.39 and above, but since RH
> backports so much stuff I'm not sure if this would actually include the
Centos
> kernels.
I did a quick check using the 'mempodipper' demo exploit on CentOS 5.7
and CentOS 6.2. Currently it doesn't seem to affect either.

On CentOS 5.7 it just hangs, on 6.2 it finishes without dropping me in a root
shell. So at first sight it seems CentOS is not affected.

Best regards, 

  Peter.