Treasure@feddit.org to Linux@lemmy.ml · edit-25 days agoUnauthenticated RCE vs all GNU/Linux systems to be fully disclosed in 2 weeks with no working fix yetnitter.poast.orgexternal-linkmessage-square29fedilinkarrow-up160arrow-down14file-textcross-posted to: cybersecurity@sh.itjust.worksprivacy@lemmy.ml
arrow-up156arrow-down1external-linkUnauthenticated RCE vs all GNU/Linux systems to be fully disclosed in 2 weeks with no working fix yetnitter.poast.orgTreasure@feddit.org to Linux@lemmy.ml · edit-25 days agomessage-square29fedilinkfile-textcross-posted to: cybersecurity@sh.itjust.worksprivacy@lemmy.ml
minus-squarenarc0tic_bird@lemm.eelinkfedilinkarrow-up37·5 days agoLet’s see if this really affects all Linux systems or if the stars need to align for this to actually be exploitable.
minus-squareFangedWyvern42@lemmy.worldlinkfedilinkarrow-up12·5 days agoI still remember hearing about a Ring 0 exploit in Windows (I may be misremembering, though) that required Ring 0 access. I think if an attacker has access to Ring 0, you’re already screwed anyway.
minus-squarePossibly linux@lemmy.ziplinkfedilinkEnglisharrow-up10·5 days agoA 9.9 is pretty bad no matter what. They wouldn’t rank it almost a 10 if it was some obscure bug that is very hard to exploit. With that being said it is hard to know without details
minus-squareShortN0te@lemmy.mllinkfedilinkarrow-up11arrow-down1·5 days agoI agree, all this attention grabbing sound to me as if this is actually not a big deal. But we will see i guess.
Let’s see if this really affects all Linux systems or if the stars need to align for this to actually be exploitable.
I still remember hearing about a Ring 0 exploit in Windows (I may be misremembering, though) that required Ring 0 access. I think if an attacker has access to Ring 0, you’re already screwed anyway.
A 9.9 is pretty bad no matter what. They wouldn’t rank it almost a 10 if it was some obscure bug that is very hard to exploit.
With that being said it is hard to know without details
I agree, all this attention grabbing sound to me as if this is actually not a big deal. But we will see i guess.