Over the weekend, we patched the Dirty COW vulnerability in the Linux kernel in a single night.
There has been a lot of talk about Dirty COW because it is so easy to exploit that even an inexperienced user can take over a machine. At vpsFree.cz, we use RHEL with the OpenVZ kernel, which is resistant to the original exploit that writes to /proc/self/mem. RHEL does not allow writing to memory through this file.
Later, however, a new exploit using ptrace appeared, and it worked on RHEL. Fortunately, a patch was released very quickly, even before Red Hat provided one. Given the seriousness of the situation, we decided not to wait and to patch as soon as possible.
At first, we thought we would need two days, but eventually decided to do everything in one night. After midnight on Saturday night, we started updating and restarting systems. We dealt with Brno first, then continued in Prague. We are now almost done. VPSes in playground and on one node in Brno still need attention, along with some details due to a technical bug introduced in the new OpenVZ kernel version.
Dobrý den, je třeba tedy nějaké akce k odstranění této chyby na našem serveru, který nám poskytujete či jste vše potřebné pořešili vy? Děkuji za reakci a přeji krásný den
Všechny VPS používají naše jádro, takže uživatelé nemusí nic dalšího řešit.
Děkuji :)