@gamingonlinux@mastodon.social I know...but urgency is the main driver to get people to do things they don't want to do.
Usually you would say:
- create a file "/etc/modprobe.d/blacklist-dirtyfrag.conf"
- blacklist and create a fakeinstall for the appropriate modules:
blacklist esp4
install esp4 /bin/false
...
- check if the modules are currently used with lsmod
- remove any affected modules running with rmmod esp4 esp6 rxrpc
- if you've executed the exploit to test, clear the page cache with echo 3 > /proc/sys/vm/drop_caches
(Note: these commands usually require root permissions)
(note by me: may not be complete, it's just an example)
Not: "YOLO this oneliner into your terminal, if it doesn't work, use sudo, gl!"
I don't know when that happened to become mainstream, but it's bad to communicate just trust me bro one-liners, so people think this is the default way to fix stuff. There are people with the tech-support exploit scheme that use "Your PC is infected, to fix, use this command" and boom, you've got a remote shell somewhere else.
Again: I'm thankful you're providing the info to a wide audience, other news outlets and even the security person who found it communicate likewise. Just trying to rise awareness about bad communication practices for not-so-tech-savy crowd, who may just have stumbled upon Linux, because Windows gave them the middle finger :)