Comment on Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions
hirihit640@sh.itjust.works 1 week agoFrom what I read about regarding the PHP vulnerabilities, the RCE was extremely difficult to pull off. I’d guess it’s the same here, at least until some non-AI companies weigh in, since these AI companies tend to distort the reporting and severities quite a bit.
probable_possum@leminal.space 1 week ago
Thanks you.
Difficult aa in unlikely that the exploit works or difficult to write an exploit? The latter doesn’t help me much. :)
Difficult as in it’s a race condition that can theoretically be exploited when you get the timing right. But timing, if it’s not on a well-known isolated system right before you in some lab depends on a million details.
probable_possum@leminal.space 1 week ago
Yes. Anthropic wrote: it took them like an hour to get it right on their lab system. That’s different than the wild wild internet.