Comments on: Flaw pops up in Linux kernel

A flaw in the operating system's core component could be used to make systems crash. But there are fixes.

How Funny

So, the current Linux kernel has a non-serious flaw that requires a person to write and compile C code to directly attack the system. How funny. I locked up Windows XP the other day with a BSOD just by clicking a wrong option for my network card in Control Panel. This article sounds incredibly biased and absolutely not objective whatsoever. The entire purpose and tone of this article is sensationalistic at best. Sure, bugs will be found here and there in almost all software, but 2-3 bugs in most Linux distributions over a period of 6-12 months, all of which were fixed *within hours*, does not warrant such a biased article by anyone. Some OS's contain hundreds of bugs and security flaws which cost the world as a whole hundreds of millions of dollars daily and those bugs and security flaws still haven't been fixed, yet the OS is *still* praised highly in most popular media.

This is my favorite part of the article: "Andrew Morton, the maintainer of the Linux 2.6 kernel, promised a fix within 48 hours and said the flaw was not very serious.

"Bugs wherein local users can lock the machine up are not uncommon, and local users have always been able to bring a machine to its knees anyway--say, by using up all the memory," he said."



Yeah right, I am sure he said that. Plus, I am also sure that he is completely unaware that you can limit a user account including memory resource usage, since he is the maintainer of the 2.6 kernel. Quotes without any real source only smear the publication in which they are written. Publications exactly like this one.

[bd84]

Bugs?

you have bugs any in operating system nothing is perfect and big deal you one bug that COULD BE a problem so what it will be fix within 48 hours if not less. Besides the more bugs that are found, the less bugs that are left....i love open source..

Flaw pops up in Cnet article

"Linux users have been urged to fix a flaw in the core component of the open-source operating system"

Urged by whom? The self-publicists who failed to show the minimum courtesy of advising the kernel maintainers before releasing the code?

So, you get access to a unix command line, compile a few lines of code and with a malicious glint in your eye your run it and manage to halt your machine. Big deal. How hard is it for someone with access to the command line and compiler to cause problems on *any* operating system?

Hmm. As I've not hear of a general problem with the kernel I assume that this is a specially crafted exploit.

That's not to say that you should not patch your kernel in timely fashion so that it is no longer vulnerable, but to imply that it could be deliberately used as an "attack" is ludicrous and unhelpful.

I'm sure that the flaws' reporters don't mind a bit.

Great article

Its good to finally get some objectivity with regard to the Linux operating system. This OS has flaws and so be it!

CVS is NOT THE LINUX KERNEL

The minor flaws were found in the CVS application/server which IS NOT THE LINUX KERNEL.

This is the kind of ignorance that proves that the author has no clue about what he is talking about.

TO THE AUTHOR : Stick to Windows or whatever you do comprehend, but learn what Linux is about before you make yourself look dumb.