Post #2297816
2026-04-30 20:06 UTC
@sitharus@cloudisland.nz Have you verified that 'blacklist' is sufficient, here? In my testing on Debian so far, it really does require 'install algif_aead /bin/false' to actually work.
Replies (2)
-
@sitharus@cloudisland.nz 2026-04-30 20:14
@mejofi@ngmx.com on my Alpine 3.23 system the blacklist prevents the exploit, the socket bind call for aead fails
-
@sitharus@cloudisland.nz 2026-04-30 20:19
@mejofi@ngmx.com setting up a Debian VM because apparently socket.recv throws on some systems as well... I bet this is something to do with musl and non-systemd systems :)