3 ms·
How do I check if my Ubuntu kernel has already been patched? And if it hasn’t, any tips on how to upgrade?
by pqdbr 3y ago
How do I check if my Ubuntu kernel has already been patched?
And if it hasn’t, any tips on how to upgrade?
- popol12 3y agosudo apt-get install musl-tools git clone https://github.com/Notselwyn/CVE-2024-1086 https://github.com/Notselwyn/CVE-2024-1086 cd CVE-2024-1086 /disable your wifi (the author says it's increasing chances of the exploit working)/ ./exploit If it runs till the end, then you should update your kernel
- caseyf 3y agolittle warning for others - i tested it on a jammy box with kernel.unprivileged_userns_clone = 0 and it froze up good
- wiredfool 3y agohttps://ubuntu.com/security/CVE-2024-1086 https://ubuntu.com/security/CVE-2024-1086 There's a super long list there, but most everything has been updated or superceded. The standard (updated) kernels are: * Focal: 5.4.0-174.193 * Jammy: 5.15.0-101.111 * Mantic: 6.5.0-26.26 And if you haven't updated, apt-get update && apt-get dist-upgrade.
- RVRX 3y agoCan you help me with reading that page? What's the difference between the `linux-kvm` vs `linux-hwe-6.5`? They both list different release fixes for Jammy, 5.15.0-101.111 and 6.5.0-26.26 respectively. Edit: Oh it looks like the generic kernel is the one named just "linux" and also has 5.15.0... as the patched version on Jammy
- wiredfool 3y agoFWIW, hwe is hardware enablement, so bleeding edge kernel on older distro. KVM is specifically focused on KVM virtual machines.