65
OpenAI Finds 948 Local Privilege Escalation Bugs in the Linux Kernel (www.phoronix.com)
submitted 3 days ago by to c/linux@lemmy.ml
32 comments fedilink hide all child comments
 

Comments

you are viewing a single comment's thread
view the rest of the comments
[–] 13 points 2 days ago* (last edited 2 days ago) (2 children)

If anybody is interested: distros like Secureblue and Kicksecure (and Kicksecure-based ones like Whonix) reduce attack surface by disabling a bunch of kernel modules, and further harden the kernel via sysctl settings and kernel arguments. Secureblue also sends a notification whenever a system update fixes a vulnerability.

https://secureblue.dev/features
https://www.kicksecure.com/#security

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
  • [–] 3 points 1 day ago (1 child)

    So how many of the 900 are they vulnerable to?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 23 hours ago

    The devs haven't said anything about this one AFAIK, though we can at least look at last year's AI-found LPEs.

    Secureblue mitigated Copy Fail and blocked the xfrm-ESP exploit path for Dirty Frag. You can read more about it here.

    Kicksecure did neither, as SUID and unprivileged user namespaces aren't disabled by default. You also can't selectively enable user namespaces after disabling it, which worsens security for web browsers and breaks some stuff.

  • permalink
  • fedilink
  • source
  • parent