bk99.de entertain the web since 1997

bk99.de
g · SecurityCurated

Linux kernel 2.6.19.2 fixes storage bug

Summary

In January 2007 Linux kernel 2.6.19.2 fixed a critical bug that could, under certain circumstances, cause data not to be written to disk correctly. Ext3 was particularly affected, but other file systems were too; tracking down the bug took around four weeks. The version also closed security holes, for example in the Bluetooth stack, with around 50 patches in total.

Ideas

  • A bug in the kernel can silently damage data.
  • The search for a bug that was hard to reproduce took weeks.
  • Even minor versions can contain important security fixes.

Insights

  • Data corruption is harder to detect and more dangerous than a crash.
  • Stable point releases are not a sideshow but mandatory updates.

Facts

  • The bug occurred mainly with Ext3.
  • 2.6.19.2 contained around 50 patches.

References

Critique

  • The report does not explain under which conditions data was lost and how those affected could check for it.

Recommendations

  • Use file systems with checksums such as Btrfs or ZFS if silent data corruption is a risk.
  • Test restores from backups regularly in order to notice damaged data in time.

Read the original article

Search the Web Archive

g · 2020

WireGuard merged into the main branch of the Linux kernel

In January 2020 Linus Torvalds merged the net-next branch, and with it the WireGuard VPN, into the main branch of the Linux kernel. This set WireGuard for Linux 5.6 in April, after Jason Donenfeld had proposed it for inclusion the previous summer. The network code comprises only around 7,000 lines, whereas OpenVPN and IPsec run to several hundred thousand.

g · 2019

Linux kernel to get drivers for Z-Wave and LoRa

In January 2019 SUSE developer Andreas Färber published an experimental Linux driver for the home automation protocol Z-Wave. Färber called it a proof of concept, tested with the Pine64 Z-Wave module and written without documentation of the UART protocol. Drivers for the LoRa radio protocol had also been in the works for some months.

g · 2005

How secure is the Linux kernel?

After several kernel holes, the Linux kernel mailing list discussed in January 2005 how secure the kernel is. Brad Spengler blamed the new development model, while Alan Cox and Theodore Ts’o saw a positive trend. More bugs found did not mean more bugs, but better searching, for example with tools such as Coverity and sparse.