207
CISA Warns of Linux Kernel Use-After-Free Vulnerability Exploited in Attacks to Deploy Ransomware (cybersecuritynews.com)
submitted 10 months ago by to c/linux@lemmy.world
93 comments fedilink hide all child comments
 

This vulnerability, hidden within the netfilter: nf_tables component, allows local attackers to escalate their privileges and potentially deploy ransomware, which could severely disrupt enterprise systems worldwide.

you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 10 months ago (2 children)

I would love to see a study about people that follow C++ best practices. Put a bunch of C++ devs and tell them to write some programs. Then see how many of those programs would be valid according to rust's borrow checker.

Whatever % of people that "fail" this test, is much higher than the 0% of people that would do so using rusts' compiler.

Of course, programs that don't pass the borrow checker can be totally memory safe, but that would need to be analyzed on a case by case basis.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 10 months ago (1 child)

    Whatever % of people that "fail" this test, is much higher than the 0% of people that would do so using rusts' compiler.

    Of course, programs that don't pass the borrow checker can be totally memory safe, but that would need to be analyzed on a case by case basis.

    Programs that do pass the borrow checker aren't guaranteed to be totally memory safe, so the number isn't actually 0% for Rust either: https://github.com/Speykious/cve-rs

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 2 points 10 months ago

    Yes, I know about that one. That is code made specifically to reproduce a bug in the compiler. Unless you do it on purpose, there's no way you'd get hit by it. If it were, they would have fixed it, it's been known for several years.

  • permalink
  • fedilink
  • source
  • parent