News for hackers. Stuff that matters.

A comment on Ubuntu still has not released patch for Linux 0day RCE in almost 3 weeks. Parent comment

Re:Ubuntu still has not released patch for Linux 0day RCE in... by estebarb on Monday November 02, 2026 @07:34PM (#50346364)
Mosty probably: not. Traffic passes throught the ASIC, usually it is not processed on CPU or custom code. Unlike typical web servers, that reduces the attack surface as there aren't software parsers (a common place where vulnerabilities hide). Additionally the OS may have additional protection measures, such as signing each binary, signing the booting image and limiting which syscalls can be done by any binary.
[ Parent | on HN ]
Re:Ubuntu still has not released patch for Linux 0day RCE in... by majorchord on Monday November 02, 2026 @11:47PM (#50348200)
The bug in question is not mitigated by any userspace actions (like signing binaries or boot images) or even by limiting syscalls, and all it takes is a listening socket on the device from either direction (inside or outside the network) to get root since router-destined packets are always processed by the CPU.
[ Parent | on HN ]
Re:Ubuntu still has not released patch for Linux 0day RCE in... by duskwuff on Tuesday November 03, 2026 @12:06AM (#50348310)
> Additionally the OS may have additional protection measures, such as signing each binary, signing the booting image and limiting which syscalls can be done by any binary.

I'd love for that to be true. Unfortunately, a lot of consumer routers are fairly straightforward Linux systems with no particular attempts at hardening.

[ Parent | on HN ]
Re:Ubuntu still has not released patch for Linux 0day RCE in... by lxgr on Tuesday November 03, 2026 @04:30AM (#50349848)
All traffic? In particular, I'd expect new connection establishment to go through a software path, looking up port forwarding and firewall rules etc. and creating hardware forwarding table entries if applicable.
[ Parent | on HN ]