News for hackers. Stuff that matters.

A comment on Linux kernel use-after-free in Netfilter, local privilege escalation. Parent comment

Re:Linux kernel use-after-free in Netfilter, local privilege... by candiddevmike on Tuesday May 09, 2023 @06:51PM (#35881382)
What a dumb policy. Why have the disclosure time be so soon? This thing will be in the wild before folks can upgrade if I'm understanding this correctly.
[ Parent | on HN ]
Re:Linux kernel use-after-free in Netfilter, local privilege... by krastanov on Tuesday May 09, 2023 @07:06PM (#35881512)
The thing is already in the wild because someone on the private mailing list already accidentally mailed it to the public mailing list.
[ Parent | on HN ]
Re:Linux kernel use-after-free in Netfilter, local privilege... by chasil on Tuesday May 09, 2023 @11:49PM (#35883443)
You have a few options for dealing with problems like this.

You can "apt update; apt upgrade" then reboot when a new kernel is available.

Oracle has also offered Ksplice for free on Ubuntu for many years, and I'm sure that patch will be available promptly.

https://ksplice.oracle.com/try/desktop

Otherwise, Kernelcare is available for a fee. I think Canonical also has paid kernel patches.

[ Parent | on HN ]
Re:Linux kernel use-after-free in Netfilter, local privilege... by withinboredom on Wednesday May 10, 2023 @08:41AM (#35886478)
There is Ubuntu Pro which is free for up to five servers/desktops, after that, it requires a paid subscription.
[ Parent | on HN ]