dead [he/him]@hexbear.net to technology@hexbear.netEnglish · 2 months ago"Dirty Frag" exploit gets root on most Linux systems released after 2017hexbear.netimagemessage-square19linkfedilinkarrow-up190arrow-down10file-text
arrow-up190arrow-down1image"Dirty Frag" exploit gets root on most Linux systems released after 2017hexbear.netdead [he/him]@hexbear.net to technology@hexbear.netEnglish · 2 months agomessage-square19linkfedilinkfile-text
https://xcancel.com/v4bel/status/2052464007857185136#m https://github.com/V4bel/dirtyfrag https://www.tomshardware.com/tech-industry/cyber-security/dirty-frag-exploit-gets-root-on-most-linux-machines-since-2017-no-patches-available-no-warning-given-copy-fail-like-vulnerability-had-its-embargo-broken
minus-squaresodium_nitride [she/her, any]@hexbear.netlinkfedilinkEnglisharrow-up9·2 months agoIs arch affected? (Please god let there be a benefit to using arch I need to justify my time sinking)
minus-squareAzzu@lemmy.dbzer0.comlinkfedilinkEnglisharrow-up8·edit-22 months agoIt is affected. If you have the 7.0.4 kernel from yesterday though, you’re fine, though the linux arch package is still on 7.0.3. linux-cachyos for example is on 7.0.4.
minus-squaresodium_nitride [she/her, any]@hexbear.netlinkfedilinkEnglisharrow-up4·2 months agoSo I guess I have to upgrade the kernel to 7.0.4? Is that possible?
minus-squareAzzu@lemmy.dbzer0.comlinkfedilinkEnglisharrow-up7·2 months agoJust wait until later today or tomorrow and the update will likely be in the core repository, then you can just do a normal update.
minus-squaresodium_nitride [she/her, any]@hexbear.netlinkfedilinkEnglisharrow-up4·2 months agoOK thanks!
minus-squaresodium_nitride [she/her, any]@hexbear.netlinkfedilinkEnglisharrow-up1·2 months agoAh, thanks for reminding me!
minus-squareMarasenna [she/her]@lemmygrad.mllinkfedilinkEnglisharrow-up7·2 months ago Is arch affected? I just tried it and it worked on my installation. I’m using linux-zen though so maybe if you’re on the vanilla kernel you’d be okay (probably not).
Is arch affected?
(Please god let there be a benefit to using arch I need to justify my time sinking)
It is affected. If you have the 7.0.4 kernel from yesterday though, you’re fine, though the
linuxarch package is still on 7.0.3.linux-cachyosfor example is on 7.0.4.So I guess I have to upgrade the kernel to 7.0.4? Is that possible?
Just wait until later today or tomorrow and the update will likely be in the core repository, then you can just do a normal update.
OK thanks!
Oh btw you can update now.
Ah, thanks for reminding me!
I just tried it and it worked on my installation.
I’m using
linux-zenthough so maybe if you’re on the vanilla kernel you’d be okay (probably not).