Post #1801927

2026-04-29 20:14 UTC

@thibaultmol @darkrat Tested on my Arch which was updated last week... it worked. After an update (with latest kernel) it does not work anymore. The POC is safe : it "just" gives you a root shell, but it won't break anything. Anyway, just update your kernel, for example this is the Debian page on this CVE : https://security-tracker.debian.org/tracker/CVE-2026-31431 Also the kernel patch : https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5

Replies (1)

@Purple@woof.tech 2026-04-29 22:36

@gbetous @thibaultmol @darkrat I think the biggest issue is that they want you to run a random script pulled through curl lol Running any code you don't fully trust on your system is a risk, this exploit shows that if any. It's real though! Go patch or disable the aforementioned kernel module on your systems ^^

Open ##1801928