How many unity games have kernel level anti cheat as a requirement and can this exploit leverage that?
Comment on Obsidian Temporarily Removes Games From Sale Due to Unity Exploit
Quetzalcutlass@lemmy.world 22 hours ago
This feels unnecessary. From what I’ve heard, the exploit in question requires a local file and only operates at the privilege level of the game itself, so you’re unlikely to encounter it unless you’re adding files to your game install.
So you’re vulnerable if you install malicious mods, in other words. Which, consisting Unity mods are done via DLL injection, is already the case even without this exploit.
krooklochurm@lemmy.ca 18 hours ago
sp3ctr4l@lemmy.dbzer0.com 15 hours ago
Oh probably at least some of them, though shouldn’t be a problem, after all, the
rootkitkernel level anti cheat is within the game directory and its standard privelege/permission model, and is only there for your safety.=D =D =D
DScratch@sh.itjust.works 21 hours ago
Yeah, but if they didn’t do anything then they’d get roasted and maybe sued for negligence.
sp3ctr4l@lemmy.dbzer0.com 20 hours ago
Exactly.
Unity literally issued a statement that every game that is affected by this should be patched with the fix ASAP… and this is people doing that.
Not like anyone ever runs a game with admin priveleges or anything, right?
Not like malware from some other source often exploits weird little shit like this that just nobody ever noticed before and thats why that malware stays hidden, right?
unity.com/security/sept-2025-01
“No evidence of exploitation” is not the same thing as “we are 100% sure no one has ever been harmed by/via this”.
cwe.mitre.org/data/definitions/426.html
Yeah sounds fairly serious to me, its an 8.4 out of 10 on the severity scale for a reason.
ILikeBoobies@lemmy.ca 19 hours ago
I would hope no one runs userspace software will elevated privileges.
sp3ctr4l@lemmy.dbzer0.com 19 hours ago
… Have you ever met a computer user?