Linux

65097 readers

944 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.
No misinformation
No NSFW content
No hate speech, bigotry, etc

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 7 years ago

MODERATORS

nooter692@lemmy.ml

AgreeableLandscape@lemmy.ml

MarcellusDrum@lemmy.ml

cypherpunks@lemmy.ml

cyclohexane@lemmy.ml

d3Xt3r@lemmy.nz

Dirty Frag: Universal Linux LPE - allows any unprivileged local user to gain root access on a vulnerable Linux system - no patch available (github.com)

submitted 8 hours ago by rabber@lemmy.ca to c/linux@lemmy.ml

33 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] jodanlime@midwest.social 4 points 7 hours ago (3 children)

Well shit. I wonder if all Linux systems are affected, the testing in the repo doesn't cover Arch for instance. For now I'd assume the answer is yes.

[–] CodenameDarlen@lemmy.world 5 points 7 hours ago* (last edited 7 hours ago)

Yea it works on arch, I just tested on my own PC:

OS: Arch Linux x86_64
Kernel: Linux 7.0.3-arch1-2

❯ ./exp
[root@arch dirtyfrag]# ls
README.md  assets  exp  exp.c
[root@arch dirtyfrag]# whoami
root

I updated it last week.

Edit: I just ran yay -Suy to update everything and still works.

[–] Remus86@lemmy.zip 2 points 6 hours ago (1 children)

I also just verified it worked on my Arch install. But running the mitigation command and rebooting effectively blocked it, and I'm on the Arch LTS kernel. I think the disabled modules are related to IPSec, which most desktop users don't really need.

[–] CameronDev@programming.dev 2 points 4 hours ago

Did you have the modules loaded before running the exploit?

[–] CameronDev@programming.dev 3 points 7 hours ago (1 children)

Its a kernel exploit, so probably. But I just checked my arch installs,and I don't have any of the kernel modules loaded. Loading requires root anyway, so I think this may be fairly limited in reality?

[–] adarza@lemmy.ca 2 points 5 hours ago

don't see 'em loaded here, either. trixie server, aurora (f44) desktop