Linux kernel use-after-free in Netfilter, local privilege escalation

Re:Linux kernel use-after-free in Netfilter, local privilege... by hsbauauvhabzb on Tuesday May 09, 2023 @06:34PM (#35881220)

What’s actually reasonable here. I’m all for exploit code becoming public eventually, but I think it’s silly to drop it immediately after a fix has been released, or before, in almost all scenarios (unless there’s been 90+ days or the issue marked as wontfix)

[ Parent | on HN ]

Re:Linux kernel use-after-free in Netfilter, local privilege... by sp332 on Tuesday May 09, 2023 @09:04PM (#35882386)

Odds are that well-resourced attackers already have the exploit by now. Making it public lets users decide if this is important to them and come up with their own mitigations.

[ Parent | on HN ]

Re:Linux kernel use-after-free in Netfilter, local privilege... by j_walter on Tuesday May 09, 2023 @11:52PM (#35883459)

Once they issue the patch...it's only a matter of time till a good chunk of reasonably decent coders can develop the exploit. Once the premise is released...yeah the top exploit coders will have this in a few hours.

[ Parent | on HN ]

Re:Linux kernel use-after-free in Netfilter, local privilege... by hsbauauvhabzb on Wednesday May 10, 2023 @12:58AM (#35883794)

So we lower the bar to all adversaries with no benefit?

If you can read exploit code to determine if patching is worth it for your use case, you can probably also read diffs for the same outcome.

I’m not saying don’t release them, but releasing them with short notice seems irresponsible, without much benefit to defenders.

[ Parent | on HN ]

Re:Linux kernel use-after-free in Netfilter, local privilege... by ikiris on Wednesday May 10, 2023 @03:12AM (#35884591)

The link to the exploit accidentally went public. Anyone can have it.

[ Parent | on HN ]