|Main Archive Page > Month Archives > oss-security archives|
changes /sys/kernel/debug/acpi/custom_method from -w--w--w- to -w-------.
This custom_method file allows to inject custom ACPI methods into the
ACPI interpreter tables.
This control file was introduced with world writeable permissions
in Linux Kernel 2.6.33.
Fix is in 2.6.37rc and the 188.8.131.52 stable release so far.
I would say that privilege escalation is possible.