And the impact remains minuscule outside of the remote desktop scenario. The attacker must already have access to exploit this, and one would have to be utterl

And the impact remains minuscule outside of the remote desktop scenario. The attacker must already have access to exploit this, and one would have to be utterly clueless to expect that an attacker wouldn't be able to get root some other way.