Library Socialism
  • Communities
  • Create Post
  • Create Community
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
SorteKanin@feddit.dk to Programming@programming.dev · 2 days ago

Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions

thehackernews.com

external-link
message-square
35
link
fedilink
  • cross-posted to:
  • selfhosted@lemmy.world
  • linux@lemmy.ml
  • programming@programming.dev
145
external-link

Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions

thehackernews.com

SorteKanin@feddit.dk to Programming@programming.dev · 2 days ago
message-square
35
link
fedilink
  • cross-posted to:
  • selfhosted@lemmy.world
  • linux@lemmy.ml
  • programming@programming.dev
Ubuntu and RHEL lack fixes for a Linux TCP use-after-free that Anthropic says it exploited to run commands as root on MPTCP servers.
  • diaphragmwp@discuss.tchncs.de
    link
    fedilink
    English
    arrow-up
    2
    arrow-down
    9
    ·
    2 days ago

    lol no, Rust itself is AI now btw

    • Reality@feddit.org
      link
      fedilink
      arrow-up
      5
      ·
      2 days ago

      This is an issue from 2019?

      • diaphragmwp@discuss.tchncs.de
        link
        fedilink
        English
        arrow-up
        1
        arrow-down
        1
        ·
        2 days ago

        Still open? Only tagged in 2024?

        • Reality@feddit.org
          link
          fedilink
          arrow-up
          5
          ·
          2 days ago

          How makes this rust ai?

          • diaphragmwp@discuss.tchncs.de
            link
            fedilink
            English
            arrow-up
            1
            arrow-down
            1
            ·
            2 days ago

            It doesn’t. It’s just a separate fact that Rust allows LLM generated code in. The common argument is that Rust doesn’t make everything it touches secure.

            • thingsiplay@lemmy.ml
              link
              fedilink
              arrow-up
              2
              arrow-down
              2
              ·
              1 day ago

              The common argument is that Rust doesn’t make everything it touches secure.

              No one said Rust makes everything it touches secure. You should stop thinking in black and white. I said this specific issue would not have happened with Rust, because Rust catches this type of issue at compilation time.

              • diaphragmwp@discuss.tchncs.de
                link
                fedilink
                English
                arrow-up
                1
                arrow-down
                1
                ·
                1 day ago

                catches this type of issue at compilation time

                This type of issue is called use-after-free.

                I sent a link to a use-after-free bug in RedoxOS, the OS advertised as being written in Rust for security. The issue is tracked as CVE with severity 7.8.

                • thingsiplay@lemmy.ml
                  link
                  fedilink
                  arrow-up
                  1
                  arrow-down
                  2
                  ·
                  1 day ago

                  That’s a bug.

                  • diaphragmwp@discuss.tchncs.de
                    link
                    fedilink
                    English
                    arrow-up
                    3
                    arrow-down
                    1
                    ·
                    1 day ago

                    So is this one in Linux.

    • boonhet@lemmy.zip
      link
      fedilink
      arrow-up
      1
      ·
      1 day ago

      Unsafe allows that, yes.

Programming@programming.dev

programming@programming.dev

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !programming@programming.dev

Welcome to the main community in programming.dev! Feel free to post anything relating to programming here!

Cross posting is strongly encouraged in the instance. If you feel your post or another person’s post makes sense in another community cross post into it.

Hope you enjoy the instance!

Rules

Rules

  • Follow the programming.dev instance rules
  • Keep content related to programming in some way
  • If you’re posting long videos try to add in some form of tldr for those who don’t want to watch videos

Wormhole

Follow the wormhole through a path of communities !webdev@programming.dev



Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 308 users / day
  • 1K users / week
  • 1.04K users / month
  • 1.05K users / 6 months
  • 1 local subscriber
  • 29.1K subscribers
  • 129 Posts
  • 394 Comments
  • Modlog
  • mods:
  • snowe@programming.dev
  • Ategon@programming.dev
  • UlrikHD@programming.dev
  • bugsmith@programming.dev
  • Spyro@programming.dev
  • BE: 0.19.20
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org