Lemmy for LUS
  • Communities
  • Create Post
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
@SorteKanin@feddit.dk to Programming@programming.dev • 2 days ago

Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions

thehackernews.com

external-link
message-square
35
fedilink
  • cross-posted to:
  • news
  • selfhosted@lemmy.world
  • linux@lemmy.ml
  • programming@programming.dev
145
external-link

Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions

thehackernews.com

@SorteKanin@feddit.dk to Programming@programming.dev • 2 days ago
message-square
35
fedilink
  • cross-posted to:
  • news
  • selfhosted@lemmy.world
  • linux@lemmy.ml
  • programming@programming.dev
Ubuntu and RHEL lack fixes for a Linux TCP use-after-free that Anthropic says it exploited to run commands as root on MPTCP servers.
  • @Reality@feddit.org
    link
    fedilink
    5•1 day ago

    This is an issue from 2019?

    • @diaphragmwp@discuss.tchncs.de
      link
      fedilink
      English
      0•1 day ago

      Still open? Only tagged in 2024?

      • @Reality@feddit.org
        link
        fedilink
        5•1 day ago

        How makes this rust ai?

        • @diaphragmwp@discuss.tchncs.de
          link
          fedilink
          English
          0•1 day ago

          It doesn’t. It’s just a separate fact that Rust allows LLM generated code in. The common argument is that Rust doesn’t make everything it touches secure.

          • @thingsiplay@lemmy.ml
            link
            fedilink
            0•1 day ago

            The common argument is that Rust doesn’t make everything it touches secure.

            No one said Rust makes everything it touches secure. You should stop thinking in black and white. I said this specific issue would not have happened with Rust, because Rust catches this type of issue at compilation time.

            • @diaphragmwp@discuss.tchncs.de
              link
              fedilink
              English
              0•
              edit-2
              1 day ago

              catches this type of issue at compilation time

              This type of issue is called use-after-free.

              I sent a link to a use-after-free bug in RedoxOS, the OS advertised as being written in Rust for security. The issue is tracked as CVE with severity 7.8.

              • @thingsiplay@lemmy.ml
                link
                fedilink
                -1•1 day ago

                That’s a bug.

                • @diaphragmwp@discuss.tchncs.de
                  link
                  fedilink
                  English
                  2•1 day ago

                  So is this one in Linux.

Programming@programming.dev

!programming@programming.dev
Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !programming@programming.dev

Welcome to the main community in programming.dev! Feel free to post anything relating to programming here!

Cross posting is strongly encouraged in the instance. If you feel your post or another person’s post makes sense in another community cross post into it.

Hope you enjoy the instance!

Rules

Rules

  • Follow the programming.dev instance rules
  • Keep content related to programming in some way
  • If you’re posting long videos try to add in some form of tldr for those who don’t want to watch videos

Wormhole

Follow the wormhole through a path of communities !webdev@programming.dev



  • 41 users / day
  • 198 users / week
  • 636 users / month
  • 2.19K users / 6 months
  • 3 subscribers
  • 2.92K Posts
  • 35.1K Comments
  • Modlog
  • mods:
  • snowe
  • Ategon
  • @UlrikHD@programming.dev
  • bugsmith
  • @Spyro@programming.dev
  • BE: 0.18.5
  • Modlog
  • Legal
  • Instances
  • Docs
  • Code
  • join-lemmy.org