“No patches available” might’ve been true at time of writing (and might still be true for old kernels, idk), but kernel 7.0.4, released yesterday, is already fixed.
It bothers me that the test for this vulnerability is a link to some random repo online with arbitrary code and no one is batting an eye.
That article doesn’t tell me much. Any writeup with the affected code?
Edit: found it
https://github.com/V4bel/dirtyfrag/blob/master/assets/write-up.md
What is the exploit case? It says it’s IPsec stuff?
Is it therefore remotely exploitable, or does it need a local user?
Are routers at risk?
“any local user can instantly get root (administrator) access on an affected box, just by running a small program” quote from the short article. So it seems home computers are safe.
I thought that was refering to copyfail?
It’s gotta be local.
Also local, right?
And yesterday people were making fun of Microsoft for logged in users being able to see their browser passwords 🤣
The thing Microsoft says is by design and won’t fix? Let’s see if you can spot the difference.
Why does Microsoft keep funding all these Linux exploits?
Where does it say in the article?
Even if it’s true, wouldn’t it be a good thing, since it probably wouldn’t be found otherwise?
Short answer, nothing. Long answer, Mcafee, Norton, Kaspersky, etc. all have divisions devoted to creating viruses to keep the rest of the company profitable. Microslop has been increasingly desperate recently as they hemorrhage users. They have always been a deeply dishonest company dating back to the 90’s and IP theft over GUI. I suspect they might be behind the recent push to scare the public of “the dangers” of open source and think of the kids I.D. checks.
To everyone who isn’t wrapping themselves in aluminum, these companies don’t have teams writing viruses. This has been regurgitated around since the 90s and it’s hilariously false.
“divisions devoted to creating viruses”
any source on this?
The hunch on my back
see now when the jews invented capitalism with the catholics and were supressing mans natural instinct for communal living
ummm ummm
you know it all started there
we just need to go back to hegel and marx and that and lenin too
ok bye
Ah yes, Microsoft is so desperate as they hemorrhage users…….
ah yes, because stocks == users, thank you for the clarification
The stock price can mean they don’t care about hemorrhaging users. Windows is far from the main thing Microsoft makes money from.
Because they want to discourage users and governments from switching to Linux
