On the one hand, props to Kovid Goyal for fixing this quickly, on the other hand I'm a bit salty that he considers it not a security issue to be able to probe for file/directory existence and get back file sizes. I included a PoC that lists the loaded kernel modules in my report. https://github.com/kovidgoyal/kitty/commit/87ab3e98f4d399337777e4329960d7cd09101e99