Hi Valentin,

On Mon, Oct 24, 2016 at 1:13 PM, Valentin B <[log in to unmask]> wrote:
> Hi Pat,
>
> If this patch / fix was applied to kernel 3.10.0-327.36.3.el7.x86_64
> then it seems to me more of a mitigation / blocker instead.

Which "patch / fix" are you referring to? Could you elaborate?

I believe the patch applied to the 7.2 kernel is in principle the same
as what appeared in the upstream kernels at kernel.org. The two
patches are not identical due to rather heavy modifications done to
the RHEL kernel.

> The patch applied to 4.7.9-200.fc24.x86_64 on Fedora 24 seems more of a
> proper fix.  The cowroot vulnerability doesn't get the chance to be
> executed at all.
>
> Best regards,
> Valentin

Akemi