From a710d35e1f64684e29b1a1d627be64f495481e13 Mon Sep 17 00:00:00 2001 From: Xi Ruoyao Date: Sun, 11 Sep 2022 12:01:31 +0800 Subject: Revert "linux kernel: disable CONFIG_USERFAULTFD to avoid CVE-2022-2590 for now" This reverts commit 098f4de3369ae0fc7d50fc6060b059eb5627de4e. CVE-2022-2590 is fixed in Linux >= 5.19.6. --- chapter10/kernel.xml | 12 ------------ 1 file changed, 12 deletions(-) (limited to 'chapter10') diff --git a/chapter10/kernel.xml b/chapter10/kernel.xml index 157fb9f64..9042f570b 100644 --- a/chapter10/kernel.xml +++ b/chapter10/kernel.xml @@ -159,8 +159,6 @@ File systems ---> Processor type and features ---> [*] Support x2apic [CONFIG_X86_X2APIC] -Memory Management options ---> - [ ] Enable userfaultfd() system call [CONFIG_USERFAULTFD] Device Drivers ---> [*] PCI Support ---> [CONFIG_PCI] [*] Message Signaled Interrupts (MSI and MSI-X) [CONFIG_PCI_MSI] @@ -254,16 +252,6 @@ Device Drivers ---> - - Enable userfaultfd() system call - - If this option is enabled, a security vulnerability not - resolved in Linux-&linux-version; yet will be exploitable. - Disable this option to avoid the vulnerability. This system call - is not used by any part of LFS or BLFS. - - - Alternatively, make oldconfig may be more -- cgit v1.2.3-54-g00ecf