59
Dirty Frag: Universal Linux LPE - allows any unprivileged local user to gain root access on a vulnerable Linux system - no patch available (github.com)
submitted 4 months ago by to c/linux@programming.dev
19 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 4 months ago

In the Node.js world adding a dependency may lead to arbitrary code being executed.

It's bad enough on its own because a bad actor can steal SSH-keys this way, but combined with this exploit they will be able to install a rootkit and compromise your entire system.

  • permalink
  • fedilink
  • source
  • parent