We are getting too close to the end of the week which means another Linux LPE released by v12-security.
PoC and explanation is here: pocs/pintheft at main · v12-security/pocs · GitHub
I haven’t been able to replicate it on 6.12 kernels on both Debian, Ubuntu or Rocky Linux
Supposedly needs CONFIG_RDS, CONFIG_RDS_TCP, CONFIG_IO_URING, kernel.io_uring_disabled=0.
Mitigation removes the modules from loading.
rmmod rds_tcp rds
printf 'install rds /bin/false\ninstall rds_tcp /bin/false\n' > /etc/modprobe.d/pintheft.conf