Forwarded from Linuxgram 🐧
📰 Linux AF_ALG Crypto Code Removing Zero-Copy Support Out Of Security Concerns
Given all the recent Linux kernel security concerns and new bugs being discovered, the Linux cryptographic subsystem is proactively dropping zero-copy functionality from AF_ALG due to growing security concerns...
🔗 Source: https://www.phoronix.com/news/Linux-AF-ALF-Zero-Copy-Security
#kernel #linux
Given all the recent Linux kernel security concerns and new bugs being discovered, the Linux cryptographic subsystem is proactively dropping zero-copy functionality from AF_ALG due to growing security concerns...
🔗 Source: https://www.phoronix.com/news/Linux-AF-ALF-Zero-Copy-Security
#kernel #linux
Phoronix
Linux AF_ALG Crypto Code Removing Zero-Copy Support Out Of Security Concerns
Given all the recent Linux kernel security concerns and new bugs being discovered, the Linux cryptographic subsystem is proactively dropping zero-copy functionality from AF_ALG due to growing security concerns.
Forwarded from 层叠 - The Cascading
🔴 Linux 内核 sctp 模块本地提权漏洞 SCTPhantom。
- 腾讯朱雀实验室利用 AI 辅助发现了一个于 2008 年引入的 sctp 模块的漏洞。
- Kernel 上游和 Debian Sid 已经发布修复版本。
CVE: CVE-2026-64564
CVSS: 8.5 （作者自评）
Fixed-In: 6.6.148, 6.12.101, 6.18.42, 7.1.6, 7.2-rc5
matrix.tencent.com/~
[感谢一位匿名订户提供信息。]
#SCTPhantom #Kernel
- 腾讯朱雀实验室利用 AI 辅助发现了一个于 2008 年引入的 sctp 模块的漏洞。
- Kernel 上游和 Debian Sid 已经发布修复版本。
CVE: CVE-2026-64564
CVSS: 8.5 （作者自评）
Fixed-In: 6.6.148, 6.12.101, 6.18.42, 7.1.6, 7.2-rc5
matrix.tencent.com/~
[感谢一位匿名订户提供信息。]
#SCTPhantom #Kernel
腾讯朱雀实验室
SCTPhantom: 潜伏18年的Linux内核提权与容器逃逸漏洞 · 腾讯朱雀实验室
SCTPhantom 是 Linux 内核 SCTP 动态地址重配置功能中的一个释放后使用漏洞。
👍4