Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions (thehackernews.com)
from cm0002@no.lastname.nz to cybersecurity@infosec.pub on 30 Oct 05:41
https://no.lastname.nz/post/4094168

#cybersecurity

threaded - newest

cron@feddit.org on 30 Oct 07:16 next collapse

Red Hat’s CVE page rates the flaw Moderate, scoring it 5.9 because the race is hard to win. It says the most likely result is a kernel crash, with memory corruption possible in theory, and that “no confidentiality or integrity impact has been demonstrated.”

Oh thats great, it only crashes the kernel. /s

lena@gregtech.eu on 30 Oct 10:01 collapse

It’s fair (if their reasoning is correct, that is), crashing the kernel is preferable to RCE

cron@feddit.org on 30 Oct 11:29 collapse

Absolutely, I’d rather see a kernel crash than a RCE.

Brkdncr@lemmy.world on 30 Oct 07:34 next collapse

Yikes.

lena@gregtech.eu on 30 Oct 10:01 collapse

I am going to scream