dirty cow und 12.04 LTS

[Lentes, Bernd]

----- On Oct 27, 2016, at 5:04 PM, Colin Law clanlaw at gmail.com wrote:

> On 27 October 2016 at 15:58, Ralf Mardorf < silver.bullet at zoho.com > wrote:

> 12.04 is still being supported (till next year I think) so normally dist-upgrade
> will work. The problem is that the system is using a 12.10 kernel, which is
> EOL.

> Colin

> --
> ubuntu-users mailing list
> ubuntu-users at lists.ubuntu.com
> Modify settings or unsubscribe at:
> https://lists.ubuntu.com/mailman/listinfo/ubuntu-users

Hi Colin,

i installed this kernel: http://packages.ubuntu.com/precise/kernel/linux-image-3.2.0-113-generic
The changelog said: 
linux (3.2.0-113.155) precise; urgency=low

  * CVE-2016-5195
    - SAUCE: mm: remove gup_flags FOLL_WRITE games from __get_user_pages()

 -- Stefan Bader <stefan.bader at canonical.com>  Tue, 18 Oct 2016 10:32:41 +0200
(http://changelogs.ubuntu.com/changelogs/pool/main/l/linux/linux_3.2.0-113.155/changelog)
So i think this is dirty-cow related.

Installation went fine, i see the "new" kernel and the initrd in /boot.
But system boots still the "old kernel" (3.5.0.23.30)

I changed /etc/default/grub:

...
GRUB_DEFAULT='Ubuntu, with Linux 3.2.0-113-generic'
...

This is my /boot/grub/grub.cfg:

...
menuentry 'Ubuntu, with Linux 3.5.0-23-generic' --class ubuntu --class gnu-linux --class gnu --class os {
...
}
menuentry 'Ubuntu, with Linux 3.5.0-23-generic (recovery mode)' --class ubuntu --class gnu-linux --class gnu --class os {
 ...
}

submenu "Previous Linux versions" {
menuentry 'Ubuntu, with Linux 3.2.0-113-generic' --class ubuntu --class gnu-linux --class gnu --class os {
        recordfail
        gfxmode $linux_gfx_mode
        insmod gzio
        insmod part_msdos
        insmod ext2
        set root='(hd0,msdos1)'
        search --no-floppy --fs-uuid --set=root 6631ef2a-0a8d-4bef-914b-fcb6ae39dc47
        linux   /boot/vmlinuz-3.2.0-113-generic root=UUID=6631ef2a-0a8d-4bef-914b-fcb6ae39dc47 ro
        initrd  /boot/initrd.img-3.2.0-113-generic
}

menuentry 'Ubuntu, with Linux 3.2.0-113-generic (recovery mode)' --class ubuntu --class gnu-linux --class gnu --class os {
...
}
...

Afterwards i ran update-grub and "grub-install /dev/sda". Both ran fine, no errors.

But still the "old" kernel boots.

I'm not very familiar with Ubuntu, i use mostly Suse.


Bernd


 

Helmholtz Zentrum Muenchen
Deutsches Forschungszentrum fuer Gesundheit und Umwelt (GmbH)
Ingolstaedter Landstr. 1
85764 Neuherberg
www.helmholtz-muenchen.de
Aufsichtsratsvorsitzende: MinDir'in Baerbel Brumme-Bothe
Geschaeftsfuehrer: Prof. Dr. Guenther Wess, Dr. Alfons Enhsen
Registergericht: Amtsgericht Muenchen HRB 6466
USt-IdNr: DE 129521671