Linux vulnerability found - effecting Debian and RedHat

DustinB3403

The article can be found here. Patch your systems.

You'll need to reboot to complete the installation process

scottalanmiller

Only affects older systems. Nothing up to date is at risk.

jmoore

@scottalanmiller Yeah but these are the stories the news media runs with. It doesn't matter if it virtually no one is affected:/ Dumb media.

RojoLoco

@scottalanmiller said in Linux vulnerability found - effecting Debian and RedHat:

Only affects older systems. Nothing up to date is at risk.

And since every Linux system on Earth is totally up to date, we can safely ignore this.

DustinB3403

@rojoloco said in Linux vulnerability found - effecting Debian and RedHat:

@scottalanmiller said in Linux vulnerability found - effecting Debian and RedHat:

Only affects older systems. Nothing up to date is at risk.

And since every Linux system on Earth is totally up to date, we can safely ignore this.

I was actually looking at some systems here with a sideways eye. . .

coliver

@rojoloco said in Linux vulnerability found - effecting Debian and RedHat:

@scottalanmiller said in Linux vulnerability found - effecting Debian and RedHat:

Only affects older systems. Nothing up to date is at risk.

And since every Linux system on Earth is totally up to date, we can safely ignore this.

It's not even the most recent point releases of Redhat or Debian. That's what is surprising to me.

Although yes I've got to look and see if some of our systems are doing what they should here.

scottalanmiller

@rojoloco said in Linux vulnerability found - effecting Debian and RedHat:

@scottalanmiller said in Linux vulnerability found - effecting Debian and RedHat:

Only affects older systems. Nothing up to date is at risk.

And since every Linux system on Earth is totally up to date, we can safely ignore this.

It's more that people with unpatched systems already know that they have loads of vulnerabilities. There is no surprise there.

stacksofplates

If you can't patch/reboot immediately you can put this in /etc/sysctl.conf

vm.legacy_va_layout = 1

Then run:

/sbin/sysctl -p

jmoore

@stacksofplates Oh that is interesting, I didn't know that.

stacksofplates

@jmoore said in Linux vulnerability found - effecting Debian and RedHat:

@stacksofplates Oh that is interesting, I didn't know that.

Ya it forces it to use the legacy mmap layout which isn't vulnerable. Once you are able to reboot then you should be able to remove it.