The Cookie Machine - Click here to drag window

DUMMY TEXT - Real text set in assets/js/theCookieMachine.js

Views: 614โ€…    Votes:  2โ€…
Tags: 12.04   upgrade  
Link: ๐Ÿ” See Original Answer on Ask Ubuntu ๐Ÿ”—

URL: https://askubuntu.com/q/842186
Title: Dist upgrade to fix dirty c0w vulnerability does not work
ID: /2016/10/26/Dist-upgrade-to-fix-dirty-c0w-vulnerability-does-not-work
Created: October 26, 2016    Edited:  April 13, 2017
Upload: November 24, 2022    Layout:  post
TOC: false    Navigation:  false    Copy to clipboard:  false


Your uname -rv reveals your current kernel as:

3.2.0-87-generic #125-Ubuntu SMP Fri Jun 19 08:25:10 UTC 2015

The date is June 19, 2015 โ€“ over one year old!

According to this: What is dirty COW bug that allows local user to gain administrative access? you should be using 3.2.0-113 Iโ€™m not sure how many kernel upgrades youโ€™ve missed, but probably lots over 16 months (subtracting 87 from 113 = 26).

Since everyone and their dog in the Linux world has heard about Dirty COW by now you should put version 3.2.0-113 in ASAP. Until you find out why your Kernel hasnโ€™t been upgrading you can install the kernel manually. You didnโ€™t use uname -a so itโ€™s unknown if you are on 32-bit or 64-bit but Iโ€™ll give the instructions for both.

Install Dirty COW fix for Ubuntu 32-Bit Generic

Go to: precise-updates/i386/linux-image-3.2.0-113 and select the link for your country to download the file. Your browser may give you a warning message. In Chrome click Keep.

The file is usually downloaded to your ~/Downloads directory but your browser can be user-configured for any location. Weโ€™ll assume itโ€™s ~/Downloads so type the following:

cd ~/Downloads
sudo dpkg -i linux-image-3.2.0-113-generic_3.2.0-113.155_i386.deb
rm linux-image-3.2.0-113-generic_3.2.0-113.155_i386.deb
sudo reboot

Install Dirty COW fix for Ubuntu 64-Bit Generic

Go to: precise-updates/amd64/linux-image-3.2.0-113 and select the link for your country to download the file. Your browser may give you a warning message. In Chrome click Keep.

The file is usually downloaded to your ~/Downloads directory but your browser can be user-configured for any location. Weโ€™ll assume itโ€™s ~/Downloads so type the following:

cd ~/Downloads
sudo dpkg -i linux-image-3.2.0-113-generic_3.2.0-113.155_amd64.deb
rm linux-image-3.2.0-113-generic_3.2.0-113.155_amd64.deb
sudo reboot

After rebooting type uname -a to confirm you are on Kernel version 3.2.0-113.

โ‡ง How is being able to break into any Linux machine through grub2 secure? Crashes on BayTrail device  โ‡ฉ