Post #1864730
2026-05-02 00:16 UTC
If a bad actor capable of doing this is at my computer they’re taking the whole computer with or without this vulnerability. Picking it up and walking away.
Not to say it shouldn’t be fixed, just that it isn’t worth panicking over for most users.
Replies (3)
-
@0_o7@lemmy.dbzer0.com 2026-05-02 12:58
As I recall correctly, this vulnerability requires an account (not sudoer) on a device to cause privilege escalation, so it’s critical where Linux is most prominent, the server space, where the access control list is pretty strict. So it’s not a big threat to a desktop space, but kinda big in enterprise systems. And the desktop users is not “most users.”
-
@utopiah@lemmy.ml 2026-05-04 06:26
Indeed, I think vulgarization of CVEs for a broader audience should start with requirements.
-
@quantumvoid0@programming.dev 2026-05-04 14:28
true, most users prolly dont even have that module enabled…and i think its only an issue if u share ur system with another user and im sure than atleast more than 50% users have single user personal systems