Beehaw
  • Communities
  • Create Post
  • search
    Search
  • Login
  • Sign Up
cm0002 ( cm0002@no.lastname.nz )  to cybersecurity@infosec.pub · 6 days ago

Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions

thehackernews.com

external-link
message-square
4
link
fedilink
  • cross-posted to:
  • programming@programming.dev
  • news@lemmy.linuxuserspace.show
  • linux@programming.dev
  • programming@programming.dev
18
external-link

Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions

thehackernews.com

cm0002 ( cm0002@no.lastname.nz )  to cybersecurity@infosec.pub · 6 days ago
message-square
4
link
fedilink
  • cross-posted to:
  • programming@programming.dev
  • news@lemmy.linuxuserspace.show
  • linux@programming.dev
  • programming@programming.dev
Ubuntu and RHEL lack fixes for a Linux TCP use-after-free that Anthropic says it exploited to run commands as root on MPTCP servers.
alert-triangle
You must log in or # to comment.
  • Lena ( lena@gregtech.eu ) 
    link
    fedilink
    arrow-up
    6
    ·
    6 days ago

    I am going to scream

  • cron ( cron@feddit.org ) 
    link
    fedilink
    arrow-up
    5
    ·
    6 days ago

    Red Hat’s CVE page rates the flaw Moderate, scoring it 5.9 because the race is hard to win. It says the most likely result is a kernel crash, with memory corruption possible in theory, and that “no confidentiality or integrity impact has been demonstrated.”

    Oh thats great, it only crashes the kernel. /s

    • Lena ( lena@gregtech.eu ) 
      link
      fedilink
      arrow-up
      13
      ·
      6 days ago

      It’s fair (if their reasoning is correct, that is), crashing the kernel is preferable to RCE

      • cron ( cron@feddit.org ) 
        link
        fedilink
        arrow-up
        5
        ·
        6 days ago

        Absolutely, I’d rather see a kernel crash than a RCE.

cybersecurity@infosec.pub

cybersecurity@infosec.pub

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !cybersecurity@infosec.pub

An umbrella community for all things cybersecurity / infosec. News, research, questions, are all welcome!

Community Rules

  • Be kind
  • Limit promotional activities
  • Non-cybersecurity posts should be redirected to other communities within infosec.pub.

Enjoy!

Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 14 users / day
  • 255 users / week
  • 537 users / month
  • 1.19K users / 6 months
  • 74 local subscribers
  • 6.59K subscribers
  • 1.05K Posts
  • 1.7K Comments
  • Modlog
  • mods:
  • shellsharks ( shellsharks@infosec.pub ) 
  • tweedge ( tweedge@infosec.pub ) 
  • UI: 0.19.15
  • BE: 0.19.21
  • Modlog
  • Legal
  • Instances
  • Docs
  • Code