Fragnesia Made Public as Latest Linux Local Privilege Escalation Vulnerability (phoronix.com) 44 points by mikece 4mo ago ↗ HN
[–] bestouff 4mo ago ↗ Lots of privilege escalations these days. But are there that many multiuser Linux systems nowadays ? I'm under the impression the whole landscape is either servers or single-user desktops (and ofc Android phones).
[–] itintheory 4mo ago ↗ Sounds like this one is in the same kernel modules as dirtyfrag, so the existing mitigations (if in place) are sufficient.
[–] nubinetwork 4mo ago ↗ At what point do we all start rolling our own microkernels? This is kind of getting silly now... 4 now in the past month?
[–] TMWNN 4mo ago ↗ UnRAID has released two point upgrades in the past two weeks because the previous AI-found vulnerabilities. Here we go again!
[–] gnufx 4mo ago ↗ The primary source, which says keep the dirtyfrag mitigations in place, is https://github.com/v12-security/pocs/tree/main/fragnesia
5 comments of 19
[ 2.8 ms ] story [ 22.6 ms ] thread