I don’t think this is very surprising. Linux is a massive blob of C written by tons of different people over a long time. Having serious bugs like this slip in seems pretty much expected. Presumably we’ll continue to see more old, serious bugs get discovered in the near future.
3 Likes
I just check, and it bypasses runtime security modules like SELinux and AppArmor !
1 Like
Hoping that the worst we see is a cat and mouse game. If there are white hat AI exploit finders.
1 Like
I think the Linux kernel needs to do some serious attack surface reduction, they’ve already started removing some old crud that no one uses anymore and fixing some longstanding security issues. They really need to make a serious push for Rust adoption though I think.
5 Likes
Hopefully all these bugs will force the people who have been continuously causing problems and whining about Rust in the kernel to face reality. I sort of doubt it though. A lot of the anti-Rust, pro-C people are seemingly more cult-like than the pro-Rust people they denigrate.
3 Likes