News for hackers. Stuff that matters.

A comment on WTF Ubuntu?. Parent comment

Re:WTF Ubuntu? by eptcyka on Monday November 02, 2026 @05:05PM (#50344549)
Not to defend Canonical, but you can mitigate this bug by dropping any and all packets with TCP options in the headers.
[ Parent | on HN ]
Re:WTF Ubuntu? by angry_octet on Tuesday November 03, 2026 @12:22AM (#50348413)
Puzzling that Canonical did not list this simple mitigation in their advisory, like Red Hat did.

iptables -I INPUT 1 -m u32 --u32 '0>>24&0x0f=6:15' -j DROP

[ Parent | on HN ]