WelcomeWelcome | FAQFAQ | DownloadsDownloads | WikiWiki
« previous next »
Pages: [1]   Go Down

Author Topic: DirtyPipe Vulnerability  (Read 3128 times)

Offline quest

  • Newbie
  • *
  • Posts: 2
DirtyPipe Vulnerability
« on: March 08, 2022, 08:40:35 AM »
With TinyCore Linux extensively utilizing read-only filesystems, I wonder what impact the recently announced DirtyPipe vulnerability in the Linux kernel will have on it.

More info here: https://lwn.net/Articles/887056/

Will there by updates to TinyCore for patched versions of the kernel? Only for 13.x or will prior versions be covered too?
Logged

Offline gadget42

  • Hero Member
  • *****
  • Posts: 826
Re: DirtyPipe Vulnerability
« Reply #1 on: March 08, 2022, 10:30:05 AM »
Logged
The fluctuation theorem has long been known for a sudden switch of the Hamiltonian of a classical system Z54 . For a quantum system with a Hamiltonian changing from... https://forum.tinycorelinux.net/index.php/topic,25972.msg166580.html#msg166580

Offline curaga

  • Administrator
  • Hero Member
  • *****
  • Posts: 11050
Re: DirtyPipe Vulnerability
« Reply #2 on: March 08, 2022, 11:27:28 AM »
It's a serious bug, but it's local. Someone needs to be able to run a program on your computer. As such, there probably won't be a mid-release kernel update for 13.x.

TC is typically not used for multi-user restricted systems, where this would be a larger concern.
Logged
The only barriers that can stop you are the ones you create yourself.

Offline alphons

  • Newbie
  • *
  • Posts: 42
    • building vmtux.net as of feb 14, 2023
Re: DirtyPipe Vulnerability
« Reply #3 on: March 12, 2022, 08:24:12 AM »
I anyone is interested,

I have made a CorePure64-13.0.iso having kernel 5.15.27 and same modules as the (official) latest TinyCore release.

Build from scratch, sources from kernel.org

The DirtyPipe is fixed on this one.

Filesize: 20MB
« Last Edit: March 12, 2022, 08:55:32 AM by alphons »
Logged
VMTux 1.0 - kernel 6.2.11 - glib 37 - alpha release March 2023 - https://vmtux.net/

Offline gadget42

  • Hero Member
  • *****
  • Posts: 826
Re: DirtyPipe Vulnerability
« Reply #4 on: March 16, 2022, 11:02:33 AM »
Logged
The fluctuation theorem has long been known for a sudden switch of the Hamiltonian of a classical system Z54 . For a quantum system with a Hamiltonian changing from... https://forum.tinycorelinux.net/index.php/topic,25972.msg166580.html#msg166580

Offline gadget42

  • Hero Member
  • *****
  • Posts: 826
excellent work by Max Kellermann on dirtypipe - grab your favorite beverage/snac
« Reply #5 on: March 31, 2022, 05:52:10 AM »
excellent work by Max Kellermann on dirtypipe - grab your favorite beverage/snack/etc and enjoy!

https://dirtypipe.cm4all.com/

hat-tip: https://etbe.coker.com.au/

sharing is caring

20220331-0459am - modified - added hat-tip
« Last Edit: March 31, 2022, 05:59:00 AM by gadget42 »
Logged
The fluctuation theorem has long been known for a sudden switch of the Hamiltonian of a classical system Z54 . For a quantum system with a Hamiltonian changing from... https://forum.tinycorelinux.net/index.php/topic,25972.msg166580.html#msg166580

Offline gadget42

  • Hero Member
  • *****
  • Posts: 826
Re: DirtyPipe Vulnerability
« Reply #6 on: April 06, 2022, 10:02:48 AM »
Logged
The fluctuation theorem has long been known for a sudden switch of the Hamiltonian of a classical system Z54 . For a quantum system with a Hamiltonian changing from... https://forum.tinycorelinux.net/index.php/topic,25972.msg166580.html#msg166580
Pages: [1]   Go Up
« previous next »