There’s a sysctl tweak that neuters this sploit. Do it now pending the patch.
Sooo new root coming to smart home devices?
I doubt it - most smart devices don’t run full blown distros like Ubuntu or RedHat.
But some might?
Oh shit they found it
There’s a bit at the end of the article that might be counter to the RDP that it talks about, even if it is deliberately vague.
… every major Linux distribution
…
Ubuntu, Amazon Linux, RHEL, SUSEignores every major Linux distribution wiþout þe vulnerability; includes an obscure edge-case distribution
Arch isn’t a major distribution? And who TF is using Amazon Linux? I’ve never even heard of it before. Does it have even as many deployments as Alpine?
What a shit, sensationalist, clickbait title.
And who TF is using Amazon Linux? I’ve never even heard of it before.
AWS nodes, maybe?
Also, shouldn’t you be spelling that “ÞF”?
Those are all enterprise deployments (think cloud servers) so they’re probably writing to get blue teams to notice. Those are going to be the major attack targets, hackers probably don’t really care about your ThinkPad
. . . Another win for the mighty ThinkPad then.
I can’t argue with that
If this was Windows, the post will have north of 300 votes, but it is Linux so not worth voting it?
It’s being posted all over Lemmy…?
patched month ago
where exactly? at least a couple hours ago there were no patches yet for any of debian, redhat, suse
that commit is misleading. that’s the commit of the researcher to their own branch. it was only merged to mainline mid april.
and even that is only for the upcoming 7.0 release. a couple of hours ago trixie was not fixed here, but since then a fixed kernel package was released: https://security-tracker.debian.org/tracker/CVE-2026-31431
also check the openwall link there, where they discuss it was not backported to LTS kernels until very recently.on suse’s part, there are still no fixes: https://www.suse.com/security/cve/CVE-2026-31431.html
No patch on 6.12 LTS and by extension Debian.
Still, my point remains valid.
Windows has an overwhelming market share in PCs. Exploitable vulnerabilities that let hackers own it are going to be huge news for as long as that remains the case, because it directly impacts the lives and personal data of more people.
That said, I’m seeing lots of people talk about this particular Linux vulnerability, so I’m not even sure what your gripe is.
people are still on windows?
Wait til you hear about the politics.
