you are viewing a single comment's thread
view the rest of the comments
[–] 12 points 4 months ago* (1 child)

Update: Kernel 7.0.5 just released

Fixes: cac2661c53f3 ("esp4: Avoid skb_cow_data whenever possible")

Fixes: 03e2a30f6a27 ("esp6: Avoid skb_cow_data whenever possible")

Fixes: 7da0dde68486 ("ip, udp: Support MSG_SPLICE_PAGES")

Fixes: 6d8192bd69bb ("ip6, udp6: Support MSG_SPLICE_PAGES")

  • source
  • hideshow 1 child comment
  • [–] 2 points 4 months ago

    that kernel release (which most distros have still not shipped yet) fixes only one of the two vulnerabilities (CVE-2026-43284); afaik even upstream still doesn't have a patch for the second one (CVE-2026-43500) at this time.

    (for people relying on Linux privilege separation, here are mitigation instructions.)

  • source
  • parent