Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

What kernel versions are affected by this, difficult to parse from the page on a skim.


First line of paragraph 2: Linux kernel 6.1 through 6.4


Also at the end, the fixed versions:

> These patches were subsequently backported to stable kernels (6.1.37, 6.3.11, and 6.4.1), effectively resolving the "Stack Rot" bug on July 1st.


It's not stated in the article whether this was because the vulnerability only affects 6.1 and up or because Linux only supports 6.1 and up.


Seems pretty clear, though the info is haphazardly scattered throughout the article.

> The StackRot vulnerability has been present in the Linux kernel since version 6.1 when the VMA tree structure was changed from red-black trees to maple trees.


Cheers! I was looking for a table or something in bold


Why ask? There has never been a release of Linux without a known local privilege escalation bug. If you take the union of all known exploits, they cover the entire history of Linux. Knowing the interval of this flaw is pointless.


Because I'm curious as to when the affected code was introduced and if it affected older kernels that I run. Pure curiosity, mainly, as I know chances are it will have been patched. I still have PTSD from the Spectre kernel fun, so cut me some slack ;)




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: