Re:Rust in Linux kernel is just a beginning
by beanjuiceII on Tuesday October 25, 2022 @08:49AM
(#33329780)
is this really that bad of a bug though? i need to be using that driver, and someone near me has to be actively knowing and trying to inject... and it's a DoS ? i'm sincerely asking btw
[ Parent
| on HN ]
Re:Rust in Linux kernel is just a beginning
by nousermane on Tuesday October 25, 2022 @10:33AM
(#33330975)
Driver in question is cfg80211. Majority of popular wireless cards use it.
DoS is the only publicly known exploit, right now. There is understanding that RCE is possible with additional specialist work.
Packet injection is an implementation detail of the first public PoC. There are other implementations, including one that runs on ESP32, and attacks unmodified Linux nearby:
Re:Rust in Linux kernel is just a beginning
by rbanffy on Tuesday October 25, 2022 @10:55AM
(#33331334)
> and someone near me has to be actively knowing and trying to inject
Just leave a small board, a battery, and a solar panel on a roof or tree near your office. If RCE is possible with this (people think it is), this would be very valuable.
On a tree near my office, you'd gain access to our network, Microsoft's and a European central bank. Not bad at all.