dirtycow / dirtycow.github.io

Dirty COW
https://dirtycow.ninja
3.35k stars 940 forks source link

Compiled list of patches #28

Closed Electronickss closed 7 years ago

Electronickss commented 7 years ago

Would it be possible to get either in the wiki or gist attached to this page, a list of distro's and the patched kernel version?

dirtycow commented 7 years ago

Sure! Either would be fine. Are you interested to collect these?

Electronickss commented 7 years ago

Is there a good way to verify that info? I can add some of what I found but I'm not 100% on how correct it is

dirtycow commented 7 years ago

Wikipedia style, do your best and if there are omissions or errors, just depend on others to help out.

unixfox commented 7 years ago

I can give some help into this work if you want to.

Electronickss commented 7 years ago

From what I found:

*4.8.0-26.28 for Ubuntu 16.10
*4.4.0-45.66 for Ubuntu 16.04 LTS
*3.13.0-100.147 for Ubuntu 14.04 LTS
*3.2.0-113.155 for Ubuntu 12.04 LTS
*3.16.36-1+deb8u2 for Debian 8
*3.2.82-1 for Debian 7
*4.7.8-1 for Debian unstable

^patched versions

If anyone wants to start a pull on the wiki. @unixfox ?

unixfox commented 7 years ago

@Electronickss Sure, maybe create a dedicated page for that ?

unixfox commented 7 years ago
*4.4.26-1 for ArchLinux (linux-lts package)
*4.8.3 for ArchLinux (linux package)
Electronickss commented 7 years ago

Yeah that's what I was thinking. There's also a spot in the vulnerability details page where it mentions the date it was patched. We could link to the list of patches page. It would probably be nice for less experienced users to include:

Check your version with uname -ar

Or something like that

kcgthb commented 7 years ago

shameless plug

In case it could help, there are instructions for patching RHEL/CentOS 6.x here: https://github.com/kcgthb/RHEL6.x-COW

Electronickss commented 7 years ago

https://github.com/dirtycow/dirtycow.github.io/wiki/Patched-Kernel-Versions

dirtycow commented 7 years ago

Excellent. Thank you @Electronickss

dirtycow commented 7 years ago

And everyone else that contributed of course 👍 :-)