Researchers at Tencent Zhuque Lab uncovered an 18-year-old vulnerability in the Linux kernel that can escape containers and gain full root privileges on the host system.
Is Android/GrapheneOS vulnerable?
What about desktop distros that similarly (?) harden Linux, such as SecureBlue?
I’m not sure but it’s patched now so make sure you update to the latest version of your OS.
I am not an expert in Linux.
It is me or it’s a bad year for Linux, I mean could this be the start of the erosion of trust in it’s security ?
What the reaction to adopt ? Especially since Apparmor and Selinux were not mitigatin techniques in some of the security breachs this year. Only use the lateste 7.x Kernels ?
PS: I don’t consider Arch aur repo in my news review, I know it was know to be risky.
They were ahead of the curve
It’s good that these security bugs get found by AI. Linux and researchers make heavy use of AI to detect these, also for new code. The next years will be hard, with many findings, until AI has maxed out all the patterns it can learn. In the long run it will lead to less bugs. We already had a similar situation when fuzzers became a thing.
You can definitely restrict access to sockets via LSMs. Whether these exploits will work depends on the security context an attacker is in.
Which kernel versions are patched? I have been finding it very difficult for a layman such as myself to answer that question.
They have a table on their website that shows the fixed versions:
Most 18-year-olds can only dream of being capable of a full system takeover.
That PR mitigates the vuln?
Yes, it was merged over 2 months ago