Alien Top
  • Communities
  • Create Post
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
SorteKanin@feddit.dk to Programming@programming.dev · 5 days ago

Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions

thehackernews.com

external-link
message-square
35
link
fedilink
  • cross-posted to:
  • linux@lemmy.ml
  • linux@programming.dev
  • programming@programming.dev
  • security@lemmy.ml
147
external-link

Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions

thehackernews.com

SorteKanin@feddit.dk to Programming@programming.dev · 5 days ago
message-square
35
link
fedilink
  • cross-posted to:
  • linux@lemmy.ml
  • linux@programming.dev
  • programming@programming.dev
  • security@lemmy.ml
Ubuntu and RHEL lack fixes for a Linux TCP use-after-free that Anthropic says it exploited to run commands as root on MPTCP servers.
  • Reality@feddit.org
    link
    fedilink
    arrow-up
    5
    ·
    4 days ago

    This is an issue from 2019?

    • diaphragmwp@discuss.tchncs.de
      link
      fedilink
      English
      arrow-up
      1
      arrow-down
      1
      ·
      4 days ago

      Still open? Only tagged in 2024?

      • Reality@feddit.org
        link
        fedilink
        arrow-up
        5
        ·
        4 days ago

        How makes this rust ai?

        • diaphragmwp@discuss.tchncs.de
          link
          fedilink
          English
          arrow-up
          1
          arrow-down
          1
          ·
          4 days ago

          It doesn’t. It’s just a separate fact that Rust allows LLM generated code in. The common argument is that Rust doesn’t make everything it touches secure.

          • thingsiplay@lemmy.ml
            link
            fedilink
            arrow-up
            2
            arrow-down
            3
            ·
            4 days ago

            The common argument is that Rust doesn’t make everything it touches secure.

            No one said Rust makes everything it touches secure. You should stop thinking in black and white. I said this specific issue would not have happened with Rust, because Rust catches this type of issue at compilation time.

            • diaphragmwp@discuss.tchncs.de
              link
              fedilink
              English
              arrow-up
              2
              arrow-down
              1
              ·
              4 days ago

              catches this type of issue at compilation time

              This type of issue is called use-after-free.

              I sent a link to a use-after-free bug in RedoxOS, the OS advertised as being written in Rust for security. The issue is tracked as CVE with severity 7.8.

              • thingsiplay@lemmy.ml
                link
                fedilink
                arrow-up
                1
                arrow-down
                3
                ·
                4 days ago

                That’s a bug.

                • diaphragmwp@discuss.tchncs.de
                  link
                  fedilink
                  English
                  arrow-up
                  3
                  arrow-down
                  1
                  ·
                  4 days ago

                  So is this one in Linux.

Programming@programming.dev

programming@programming.dev

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !programming@programming.dev

Welcome to the main community in programming.dev! Feel free to post anything relating to programming here!

Cross posting is strongly encouraged in the instance. If you feel your post or another person’s post makes sense in another community cross post into it.

Hope you enjoy the instance!

Rules

Rules

  • Follow the programming.dev instance rules
  • Keep content related to programming in some way
  • If you’re posting long videos try to add in some form of tldr for those who don’t want to watch videos

Wormhole

Follow the wormhole through a path of communities !webdev@programming.dev



Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 327 users / day
  • 1.37K users / week
  • 3.57K users / month
  • 8.59K users / 6 months
  • 30 local subscribers
  • 29.1K subscribers
  • 3.25K Posts
  • 37.6K Comments
  • Modlog
  • mods:
  • snowe@programming.dev
  • Ategon@programming.dev
  • UlrikHD@programming.dev
  • bugsmith@programming.dev
  • Spyro@programming.dev
  • BE: 0.19.17
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org