you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 1 day ago (1 child)

So how many of the 900 are they vulnerable to?

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 20 hours ago

    The devs haven't said anything about this one AFAIK, though we can at least look at last year's AI-found LPEs.

    Secureblue mitigated Copy Fail and blocked the xfrm-ESP exploit path for Dirty Frag. You can read more about it here.

    Kicksecure did neither, as SUID and unprivileged user namespaces aren't disabled by default. You also can't selectively enable user namespaces after disabling it, which worsens security for web browsers and breaks some stuff.

  • source
  • parent