Elektrine lite

← Feed

@paul@tapbots.social

Post #1803608

2026-04-30 01:17 UTC

Yikes. https://copy.fail

Replies (6)

  • @jsatk@sfba.social 2026-04-30 02:24

    @paul@tapbots.social I read through this several times and still feel dumb. I don’t fully understand it beyond that through a very specific series of events you can use a 732 bit python script to change `su` in memory and somehow gain full root access. Still feels like this is a pretty fringe thing. I wonder if there’s any known cases of the exploit being used.

    Open ##2311251

  • @joshg@mathstodon.xyz 2026-04-30 03:25

    @paul@tapbots.social is it wrong to wish that something like this would be announced right as I start my OSCP exam

    Open ##2311252

  • @god@tlv.cool 2026-04-30 04:28

    @paul@tapbots.social one of many more like it to come

    Open ##2311253

  • @paul@tapbots.social it says every distro is vulnerable, but then the mitigation says it relies on a specific kernel module, which is not loaded by default, so which is it 🤔

    Open ##2311254

  • @minus9@hachyderm.io 2026-05-01 16:29

    @paul@tapbots.social Mitigation if your distro hasn't already had a patched kernel update. (Debian and many others already have). # Block future loading sudo tee /etc/modprobe.d/disable-algif-aead.conf /dev/null

    Open ##2311256

  • @paul@tapbots.social Just verified if you are using unattended updates on ubuntu, they blacklisted the impacted kernal mod.

    Open ##2311257