natan

@whitequark@social.treehouse.systems as a quick hack, blocking the xfrm_algo module from loading prevents this one (tested on amazon linux 2023) edit: for distros that build it into the kernel this won't work, but there's probably some function to add to the initcall_blacklist cmdline argument like the copyfail mitigation on RHEL

@squalouJenkins@fosstodon.org @wdormann@infosec.exchange This1 exploit worked on AL2023 2023.11.20260413, the modprobe.d + rmmod combo "fixed" it (bind: No such file or directory)