Security bugs are reported here via bugzilla

[Niki Guldbrand <niki AT lunar-linux.org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi W0rf.

Here is a patch which should fix the kernel ioperm security bug, i just
went into 2.4.21rc3 tonight...


diff -Nru a/arch/i386/kernel/ioport.c b/arch/i386/kernel/ioport.c
- --- a/arch/i386/kernel/ioport.c       Thu May 22 15:03:32 2003
+++ b/arch/i386/kernel/ioport.c Thu May 22 15:03:32 2003
@@ -72,17 +72,18 @@
                 */
                memset(t->io_bitmap,0xff,(IO_BITMAP_SIZE+1)*4);
                t->ioperm = 1;
- -             /*
- -              * this activates it in the TSS
- -              */
- -             tss->bitmap = IO_BITMAP_OFFSET;
        }
 
        /*
         * do it in the per-thread copy and in the TSS ...
         */
        set_bitmap(t->io_bitmap, from, num, !turn_on);
- -     set_bitmap(tss->io_bitmap, from, num, !turn_on);
+       if (tss->bitmap == IO_BITMAP_OFFSET) { /* already active? */
+               set_bitmap(tss->io_bitmap, from, num, !turn_on);
+       } else {
+               memcpy(tss->io_bitmap, t->io_bitmap, IO_BITMAP_SIZE);
+               tss->bitmap = IO_BITMAP_OFFSET; /* Activate it in the TSS */
+       }
 
        return 0;
 }
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQE+zWIu3DVHt+ASOj0RAviDAJ9HtjjwdP9z83Z+DLV2UNZ9U9tT6QCfXCNf
e3WJg9Phk9qaUzumfh86doc=
=/bnT
-----END PGP SIGNATURE-----