I was hoping Microsoft's own write-up[0] would cover what distro this PoC was based off of since most popular ones using systemd have some kernel level security

I was hoping Microsoft's own write-up[0] would cover what distro this PoC was based off of since most popular ones using systemd have some kernel level security policy framework (whether apparmor or selinux). Instead, under the mitigation section of their blog post the focus is on some product known as Microsoft Defender for Endpoint. From my own (naive) understanding the type of exploit described here would violate most sane selinux policies for the networkd binary. I guess the only way to know for sure is to try exploiting this vuln on my own systems and see what happens. [0] https://www.microsoft.com/security/blog/2022/04/26/microsoft-finds-new-elevation-of-privilege-linux-vulnerability-nimbuspwn/ https://www.microsoft.com/security/blog/2022/04/26/microsoft...