3 ms·

> This vulnerability could be exploited to get a privilege escalation on Ubuntu 22.04. Nothing else is vulnerable?

• Zenst 4y ago
  As this was a linux kernal subsystem "netfilter subsystem of the Linux kernel" then I would presume not, and any kernel with the impacted subsystem present and equally exposed would be equally at risk. A bit like finding a flaw in a steering wheel used in a particular model of car when other car makes use that same steering wheel, yet were not tested in the findings. At least that is my interpretation of all this.
  • megous 4y ago
    The commit references this in the "Fixes" tag: https://github.com/torvalds/linux/commit/7d7402642eaf385aef0772eff5a35e34fc4995d7 https://github.com/torvalds/linux/commit/7d7402642eaf385aef0... That's a commit from 2015
  • zinekeller 4y ago
    > A bit like finding a flaw in a steering wheel used in a particular model of car when other car makes use that same steering wheel, yet were not tested in the findings. I kinda hoped you've reference airbags instead (https://en.wikipedia.org/wiki/Takata_Corporation#Defective_airbag_recalls_.282013.E2.80.93present.29 https://en.wikipedia.org/wiki/Takata_Corporation#Defective_a...)
• execveat 4y ago
  RHEL 9 (and likely many other distros with same kernel version) is vulnerable as well: https://access.redhat.com/security/cve/cve-2022-34918#cve-faq https://access.redhat.com/security/cve/cve-2022-34918#cve-fa...
• samus 4y ago
  This is stated to make independent verification of the exploit easier. It might or might not work on other systems, but security researchers and maintainers should waste as little time as possible to reproduce it!