Dirtyfrag: Universal Linux LPE

[flagged]

[flagged]

Here we go again

Linux is a single user system and should be treated as such. Run your services as root. Don't rely on unix user primitives for security.

Testing the rxrpc vuln on aarch64, I get a kernel data abort, which is interesting. Not looked into the root cause yet!

Every time someone finds a universal Linux privilege escalation, somewhere a sysadmin whispers 'this is why we don't run as root' while nervously checking if their containers are actually isolated.

Where is the famous Linux is so much secure than Windows?

I would like to see the same hate comments about Linux than the ones we would see if it was a Windows vulnerability...