Post #3331742

"[…] The "#CopyFail" vulnerability presented a unique challenge for us. Despite our practice of deploying #Linux patch updates every two weeks, we remained vulnerable because a month-old mainline fix had yet to be backported to our primary #kernel line. Despite that, we were still able to roll out patched kernels within hours of the backport's release. In the interim, #bpf-lsm provided a surgical, no-reboot mitigation that secured our fleet. […]" https://blog.cloudflare.com/copy-fail-linux-vulnerability-mitigation/ #LinuxKernel