Advanced

The only good news

Story: Linux zero-day affects most Androids, millions of Linux PCsTotal Replies: 1
Author Content
penguinist

Jan 19, 2016
10:13 AM EST 		The only good news is that CentOS/RHEL 6 is using a kernel version which is not vulnerable.

https://bugzilla.redhat.com/show_bug.cgi?id=1297475

Now I'm so happy that I decided to keep all my servers on "6".

The other piece of good news is that this exploit requires local access, and 99.9% of the world's Linux servers are physically secure and are therefore not vulnerable. The issue will be on systems that support unprivileged users accounts or have installations of non-repo closed software.
JaseP

Jan 19, 2016
3:27 PM EST 		The patch is expected today... And,... Once again this is an overblown security risk because it is only exploitable as a local user (a privilege escalation),... which means you already have to be logged on to the server or machine. So, unless you are willy-nilly granting accounts to your servers, or have poor security to login already, you have plenty of time to patch.

Post a reply to this thread:

A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.

Your message:
|||||
10
Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help

Sign up and post (it is free)  or  Log in and post