Lemmy for LUS
  • Communities
  • Create Post
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
@SorteKanin@feddit.dk to Programming@programming.dev • 2 days ago

Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions

thehackernews.com

external-link
message-square
35
fedilink
  • cross-posted to:
  • news
  • selfhosted@lemmy.world
  • linux@lemmy.ml
  • programming@programming.dev
145
external-link

Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions

thehackernews.com

@SorteKanin@feddit.dk to Programming@programming.dev • 2 days ago
message-square
35
fedilink
  • cross-posted to:
  • news
  • selfhosted@lemmy.world
  • linux@lemmy.ml
  • programming@programming.dev
Ubuntu and RHEL lack fixes for a Linux TCP use-after-free that Anthropic says it exploited to run commands as root on MPTCP servers.
  • @diaphragmwp@discuss.tchncs.de
    link
    fedilink
    English
    -7•
    edit-2
    1 day ago

    lol no, Rust itself is AI now btw

    • @boonhet@lemmy.zip
      link
      fedilink
      1•23 hours ago

      Unsafe allows that, yes.

    • @Reality@feddit.org
      link
      fedilink
      5•1 day ago

      This is an issue from 2019?

      • @diaphragmwp@discuss.tchncs.de
        link
        fedilink
        English
        0•1 day ago

        Still open? Only tagged in 2024?

        • @Reality@feddit.org
          link
          fedilink
          5•1 day ago

          How makes this rust ai?

          • @diaphragmwp@discuss.tchncs.de
            link
            fedilink
            English
            0•1 day ago

            It doesn’t. It’s just a separate fact that Rust allows LLM generated code in. The common argument is that Rust doesn’t make everything it touches secure.

            • @thingsiplay@lemmy.ml
              link
              fedilink
              0•1 day ago

              The common argument is that Rust doesn’t make everything it touches secure.

              No one said Rust makes everything it touches secure. You should stop thinking in black and white. I said this specific issue would not have happened with Rust, because Rust catches this type of issue at compilation time.

              • @diaphragmwp@discuss.tchncs.de
                link
                fedilink
                English
                0•
                edit-2
                1 day ago

                catches this type of issue at compilation time

                This type of issue is called use-after-free.

                I sent a link to a use-after-free bug in RedoxOS, the OS advertised as being written in Rust for security. The issue is tracked as CVE with severity 7.8.

                • @thingsiplay@lemmy.ml
                  link
                  fedilink
                  -1•1 day ago

                  That’s a bug.

                  • @diaphragmwp@discuss.tchncs.de
                    link
                    fedilink
                    English
                    2•1 day ago

                    So is this one in Linux.

Programming@programming.dev

!programming@programming.dev
Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !programming@programming.dev

Welcome to the main community in programming.dev! Feel free to post anything relating to programming here!

Cross posting is strongly encouraged in the instance. If you feel your post or another person’s post makes sense in another community cross post into it.

Hope you enjoy the instance!

Rules

Rules

  • Follow the programming.dev instance rules
  • Keep content related to programming in some way
  • If you’re posting long videos try to add in some form of tldr for those who don’t want to watch videos

Wormhole

Follow the wormhole through a path of communities !webdev@programming.dev



  • 41 users / day
  • 198 users / week
  • 636 users / month
  • 2.19K users / 6 months
  • 3 subscribers
  • 2.92K Posts
  • 35.1K Comments
  • Modlog
  • mods:
  • snowe
  • Ategon
  • @UlrikHD@programming.dev
  • bugsmith
  • @Spyro@programming.dev
  • BE: 0.18.5
  • Modlog
  • Legal
  • Instances
  • Docs
  • Code
  • join-lemmy.org