Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions

Comments

• lena@gregtech.eu ⁨1⁩ ⁨hour⁩ ago

  I am going to scream

  source
• Brkdncr@lemmy.world ⁨3⁩ ⁨hours⁩ ago

  Yikes.

  source
• cron@feddit.org ⁨4⁩ ⁨hours⁩ ago

  Red Hat’s CVE page rates the flaw Moderate, scoring it 5.9 because the race is hard to win. It says the most likely result is a kernel crash, with memory corruption possible in theory, and that “no confidentiality or integrity impact has been demonstrated.”

  Oh thats great, it only crashes the kernel. /s

  source

  • lena@gregtech.eu ⁨1⁩ ⁨hour⁩ ago

    It’s fair (if their reasoning is correct, that is), crashing the kernel is preferable to RCE

    source