Re: Dirty Frag: Universal Linux LPE

["Bernhard R. Link" <brl+oss () mail brlink eu>]

* Hyunwoo Kim <imv4bel () gmail com> [260507 21:02]:
> no patches exist for any distribution. Use the following command to remove the
> modules in which the vulnerabilities occur:
G ```
> sh -c "printf 'install esp4 /bin/false\ninstall esp6 /bin/false\ninstall rxrpc /bin/false\n' > 
> /etc/modprobe.d/dirtyfrag.conf; rmmod esp4 esp6 rxrpc 2>/dev/null; true"
> ```

It really starts to feel like there should be a design CVE for not
having an only-appendable-by-root allowlist of modules to autoload...

sigh...