Post B5pLfklm1twYQjURd2 by v_v@mastodon.catgirl.cloud
 (DIR) More posts by v_v@mastodon.catgirl.cloud
 (DIR) Post #B5nfqb2IAWXmC7kCqu by darkrat@chaosfurs.social
       0 likes, 1 repeats
       
       Holy. Fucking. Fuckballs.This exploit is... insane.> An unprivileged local user can write 4 controlled bytes into the page cache of any readable file on a Linux system, and use that to gain roothttps://copy.fail/#copyfail #linux
       
 (DIR) Post #B5ntvcfouGTk4zWYfw by thibaultmol@en.osm.town
       0 likes, 0 repeats
       
       @darkrat It's weird how the code they want you to curl and run is minified and has a binary section in it.... just weird....edit: tbc, my friend said this, I hadn't checked it yet.He said that this is not normally how proof of concepts are writtenI really hope someone on fedi who knows this stuff can verify this cause I'm not boosting it without seeing that
       
 (DIR) Post #B5ntvd5hM3B9NFdE0m by drwho@masto.hackers.town
       0 likes, 0 repeats
       
       @thibaultmol @darkrat It's needlessly obfuscated. And the "curl pipe bash" construction is just bullshit. That said, a few of us tested it and it didn't work on our boxen.
       
 (DIR) Post #B5pLfklm1twYQjURd2 by v_v@mastodon.catgirl.cloud
       0 likes, 0 repeats
       
       @darkrat tried detonating it on my server, alpine's binary kernel dist seems to be unaffectedsame thing on my lappy with a slightly tweaked kernel, looks like building it from source finally paid off
       
 (DIR) Post #B5pLfl7kiBWZWtlzt2 by ariadne@social.treehouse.systems
       0 likes, 0 repeats
       
       @v_v @darkrat alpine is affected if bbsuid package is used as suid binary (e.g. /bin/bbsuid)