GitHub - V4bel/dirtyfrag
github.com
Contribute to V4bel/dirtyfrag development by creating an account on GitHub.
  • Ooops@feddit.org
    12·
    2 days ago

    Update: Kernel 7.0.5 just released

    Fixes: cac2661c53f3 (“esp4: Avoid skb_cow_data whenever possible”)

    Fixes: 03e2a30f6a27 (“esp6: Avoid skb_cow_data whenever possible”)

    Fixes: 7da0dde68486 (“ip, udp: Support MSG_SPLICE_PAGES”)

    Fixes: 6d8192bd69bb (“ip6, udp6: Support MSG_SPLICE_PAGES”)

    • Arthur Besse@lemmy.mlMEnglish
      2·
      10 hours ago

      that kernel release (which most distros have still not shipped yet) fixes only one of the two vulnerabilities (CVE-2026-43284); afaik even upstream still doesn’t have a patch for the second one (CVE-2026-43500) at this time.

      (for people relying on Linux privilege separation, here are mitigation instructions.)