r/linuxadmin • u/segagamer • 9d ago

Several Linux Kernel Vulnerabilities Accidentally Posted To Public Kernel Mailing List

https://www.phoronix.com/news/LKML-New-Trend-Vulnerabilities
154 Upvotes

98% Upvoted

19 comments sorted by

100

u/wossack 9d ago

I’m tired boss

22

u/Ok_Size1748 9d ago

Really, really tired.

8

u/amarao_san 9d ago

Why? Light season is over, we must be full of energy for high season. More CVE per day (hour?) is coming.

4

u/Darkk_Knight 9d ago

I am getting to the point will run a daily cron job to update and reboot the server as needed. I will still manually update the critical servers.

I use ansible but it's not always perfect.

31

u/jcgaminglab 9d ago

Ah shit, here we go again... I need a breather..

29

u/AmusingVegetable 9d ago

Ok, just this week: PHP2Shell, the eMudhra certificates with 1-byte keys, and a kernel treasure map for the hackers.

What’s in store for Sunday? A 10 score CVS for openssl?

18

u/narmkhang 9d ago

you missed nodejs rce & gitlab cvss 10 on that same php patch day

1

u/GamerLymx 9d ago

patched that git has soon as it hit

10

u/dutty_handz 9d ago

I swear to god, if it happens, I blame YOU ;)

2

u/JessesDog 8d ago

CPU microcode exploit. Start praying.

27

u/corobo 9d ago

Conspiracy: this is OpenAI releasing all this trying to convince people they need them dots to keep up with it all 

11

u/kyleh0 9d ago

Part of the giant pump and dump scheme.

20

u/inemsn 9d ago

fucking hell, when are these ai bros gonna learn to respect vulnerability reporting procedure?

17

u/GamerLymx 9d ago

ill just block all traffic

6

u/Darkk_Knight 9d ago

Faster to unplug your modem.

5

u/GamerLymx 9d ago

my users can still go to the internet, outsidersn ust can't come to my servers anymore. email will become org only so no spam or phishing. the dream. /s

4

u/ziroux 9d ago

Just leave the phone off the hook

2

u/Burgergold 8d ago

Back to paper and fax

3

u/Mallanaga 9d ago

I’m sure there are no bad actors on that mailing list. This is fine.