Post #1803608
2026-04-30 01:17 UTC
Replies (6)
-
@jsatk@sfba.social 2026-04-30 02:24
@paul@tapbots.social I read through this several times and still feel dumb. I don’t fully understand it beyond that through a very specific series of events you can use a 732 bit python script to change `su` in memory and somehow gain full root access. Still feels like this is a pretty fringe thing. I wonder if there’s any known cases of the exploit being used.
-
@joshg@mathstodon.xyz 2026-04-30 03:25
@paul@tapbots.social is it wrong to wish that something like this would be announced right as I start my OSCP exam
-
@god@tlv.cool 2026-04-30 04:28
@paul@tapbots.social one of many more like it to come
-
@13xforever@social.treehouse.systems 2026-04-30 04:39
@paul@tapbots.social it says every distro is vulnerable, but then the mitigation says it relies on a specific kernel module, which is not loaded by default, so which is it 🤔
-
@minus9@hachyderm.io 2026-05-01 16:29
@paul@tapbots.social Mitigation if your distro hasn't already had a patched kernel update. (Debian and many others already have). # Block future loading sudo tee /etc/modprobe.d/disable-algif-aead.conf /dev/null
-
@podcastguru@podcastindex.social 2026-05-03 09:21
@paul@tapbots.social Just verified if you are using unattended updates on ubuntu, they blacklisted the impacted kernal mod.