195
Dirty Frag: Universal Linux LPE - allows any unprivileged local user to gain root access on a vulnerable Linux system - no patch available (github.com)
submitted 4 months ago by to c/linux@lemmy.ml
68 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 7 points 4 months ago (8 children)

Well shit. I wonder if all Linux systems are affected, the testing in the repo doesn't cover Arch for instance. For now I'd assume the answer is yes.

  • permalink
  • fedilink
  • source
  • hideshow 8 child comments
    •
  • [–] 9 points 4 months ago (2 children)

    I also just verified it worked on my Arch install. But running the mitigation command and rebooting effectively blocked it, and I'm on the Arch LTS kernel. I think the disabled modules are related to IPSec, which most desktop users don't really need.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 6 points 4 months ago* (last edited 4 months ago) (2 children)

    Its a kernel exploit, so probably. But I just checked my arch installs,and I don't have any of the kernel modules loaded. Loading requires root anyway, so I think this may be fairly limited in reality?

    Edit: seems the modules get loaded automatically :(

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •