Post #2707406
2026-05-08 00:22 UTC
AF_NETLINK absolutely isn't obscure, the kernel uses it for communicating with userspace applications, such as hardware uevents, which means disabling netlink breaks the device manager
what the LPE really exploited was NETLINK_XFRM, a type of netlink message the kernel uses for IPsec
Replies (1)
-
@hailey@hails.org 2026-05-08 00:41
@rose ya I said exotic, not obscure. Most programs do not need netlink and it opens up a wide surface area for exploits