2026-05-01 21:43 UTC
@Shdwdrgn As I understand the exploit had been in the wild for about 10 years (I think I read). It sounded like it was more a simple code bug rather than an actual exploit. In any case, it's fixed/ patched. I don't know that anyone ever took advantage of the 'feature' before the door was closed; rather it was simply there.
Replies (1)
-
@Shdwdrgn@tech.lgbt 2026-05-01 21:50
@ManyRoads It affects all kernels back to at least 4.10, released in 2017. Hard to say if anyone else ever found it, but it's just the whole manner in which this was announced that is really annoying a lot of people. Zero of the major distros like Redhat or Debian received any notice about it, so people are pissed. And I don't think it's actually patched yet. There are mitigations in place that disable crypto features which relied on this mod, but I haven't seen any new kernels yet.