alt Hacker NewsI get the frustration, but isn't there an iptables rule that is a viable mitigation? Why not deploy that first?
Replies
lekevicius • today at 3:39 PM
Because you shouldn't have to do mitigations for this level of severity while waiting weeks for OS patch. I did that, but now I'm waiting for patch to unwind my mitigations.
Aldipower • today at 6:58 PM
Why do you ask such simple and obvious questions!? :-P
nft add table ip cve_2026_98432
nft add chain ip cve_2026_98432 pre '{ type filter hook prerouting priority -300; }'
nft add rule ip cve_2026_98432 pre meta l4proto tcp ip hdrlength gt 5 counter drop
callamdelaney • today at 4:20 PM
Talking of which, is there a link to the temporary fix?
➕ show 1 reply
Shank • today at 6:25 PM
[dead]
Because that doesn't allow for sensationalizing the frustration.