334
Serious Linux vulnerability affecting nearly every system. Patch your systems. (copy.fail)
submitted 5 months ago by to c/selfhosted@lemmy.world
74 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 5 months ago (2 children)

Do you have a source for how often it happens or is this conjecture? I guess this would most often happen through supply chain attacks or physical access, the first not being all that common in my understanding and the latter not being a typical threat model for a home computer. But if you have a source explaining what actually happens, I would love to read it.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 5 months ago* (1 child)

    There are plenty of way to get a local unprivileged shell

    For instance, if you are running a old version of cups someone could chain together several vulnerabilities to gain root on your system

    https://www.bleepingcomputer.com/news/security/cups-flaws-enable-linux-remote-code-execution-but-theres-a-catch/

    Having a MAC like SELinux helps to mitigate this but you still should patch as soon as possible

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 5 months ago

    These are from 2024 (which means your box likely has none of these in 2026), and “the attacker has to trick a user into printing from a malicious printer server on their local network that suddenly appears on their machine” which is quite unlikely for a regular home pc. The attacker would require access to your network which would likely mean they’re inside your house so you have other problems besides privilege escalation.

  • permalink
  • fedilink
  • source
  • parent