* Hyunwoo Kim <[email protected]> [260507 21:02]:
> no patches exist for any distribution. Use the following command to remove the
> modules in which the vulnerabilities occur:
G ```
> sh -c "printf 'install esp4 /bin/false\ninstall esp6 /bin/false\ninstall 
> rxrpc /bin/false\n' > /etc/modprobe.d/dirtyfrag.conf; rmmod esp4 esp6 rxrpc 
> 2>/dev/null; true"
> ```

It really starts to feel like there should be a design CVE for not
having an only-appendable-by-root allowlist of modules to autoload...

sigh...

Reply via email to