Kernel Vulnerability in Ubuntu 8.04 and so Elyssa

[Husse]

This kernel vulnerability could allow a local attacker to cause a system crash, leading to a DoS (Denial of Service)

Quoted from
http://news.softpedia.com/news/Kernel-V ... 7195.shtml
While it is bad it is not to serious if it really is limited to a local attacker
I would not recommend upgrading the kernel as Elyssa is Beta and it will literally break everything
The upgraded kernel should of course preferably be in the final version, but it is impossible at this late stage. We would have to start from scratch...
It is a serious vulnerability, but it can only be performed by a local attacker, not over the internet, so the danger may not be all that high.
I will do an update on a nvidia system and see how difficult it is to get back after an update

[Husse]

I updated the kernel and nothing happened more than that I now have linux-image-2.6.24-18-generic 2.6.24-18.32
Even the nvidia driver is ok...
It seems to be ok to temporarily allow level 4 and 5 in mintUpdate to be updated
But please note that

software such as VirtualBox will not work anymore, therefore you must recompile the kernel module by issuing a specific command in the terminal. Moreover, if you use the linux-restricted-modules package, you have to update it as well to get modules which work with the new Linux kernel version.

My nvidia driver is installed with Envy.... I have nothing installed with the restricted-modules at all

[Husse]

Well it broke wireless in my laptop (I can see my AP but not connect - a WPA problem)
This is as I stated not a very large problem, but can have large consequences in other areas
I should have stressed that an update can work, but that in general you should not take the risk that your system breaks for a vulnerability that is only local.

[AK Dave]

My laptop has the -19 kernel from proposed. Will check WPA tonight and confirm wireless works and WPA works.