Comment on Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions
cron@feddit.org 1 week ago
Red Hat’s CVE page rates the flaw Moderate, scoring it 5.9 because the race is hard to win. It says the most likely result is a kernel crash, with memory corruption possible in theory, and that “no confidentiality or integrity impact has been demonstrated.”
Oh thats great, it only crashes the kernel. /s
lena@gregtech.eu 1 week ago
It’s fair (if their reasoning is correct, that is), crashing the kernel is preferable to RCE
cron@feddit.org 1 week ago
Absolutely, I’d rather see a kernel crash than a RCE.