Another local privilege escalation in the Linux kernel has a POC on Github, in what appears to be yet another zero day disclosure of an AI discovered bug.
Great, Linux now gets to go through the Microsoft patch of the day/week setup. Eventually people will become numb to these warnings I fear also.
The other thing is if like this one, they are subclasses of another vuln (Dirtyfrag) wouldn’t patching dirtyfrag itself have some effect, especially since the mitigation is the same according to the PoC page?
1 Like
Moved to Vulnerabilities
We are going to need to dramatically rethink patching strategies globally. There’s no other solution. The current patching strategies that we have in the industry are not going to keep up with this. There is zero chance.
3 Likes
Yes. The same mitigation (removing the esp4/esp6 modules) will address this vulnerability.
Patching strategies always have been a weak point and have had troubles keeping up. The question is what replaces it? Even automated patching is not a solution as a bad patch will take too much down.
After CopyFail, Cloudflare was proudly claiming how they weren’t vulnerable because they run a custom kernel (!) the updates from which seem to be automated, and tested, in true CI/CD fashion. Company aside, I don’t think it is an approach everyone can take, but it certainly seems interesting. I wonder if some distros decide to undertake something similar, as I don’t see anything other than automation helping with this…