Re: Attaque locale root kernel Linux / risque pour les services hébergés

Félix Hauri via gull <gull-04vmY7CpswVinyhjFObuvR+/[email protected]> Fri, 1 May 2026 12:41:45 +0200
Newsgroups gmane.org.user-groups.gull.general
Message-ID <[email protected]>
TGUgRnJpLCBNYXkgMDEsIDIwMjYgYXQgMDg6MDk6MzNBTSArMDIwMCwgTWFyYyBTQ0hBRUZFUiB2
aWEgZ3VsbCBhIMOpY3JpdCA6Cj4gT24gVGh1LCBBcHIgMzAsIDIwMjYgYXQgMDc6NDY6MzNQTSAr
MDIwMCwgRnJlZGVyaWMgRHVtYXMgdmlhIGd1bGwgd3JvdGU6Cj4gPiBibGFja2xpc3QgYWxnaWZf
YWVhZCAKPiAKPiBKJ2F1cmFpcyBhdXNzaSBwZW5zw6kgw6AgcHJpb3JpIHF1ZSBjZWxhIHBvdXZh
aXQgbWFyY2hlci4gIFNvdXMgRGViaWFuLAo+IG1vbiBwcmVtaWVyIHLDqWZsZXhlIGF1cmFpdCBt
w6ptZSDDqXTDqSBkZSBmYWlyZSB1bmUgZGl2ZXJzaW9uIGV0IGRlCj4gcmVub21tZXIgYWxnaWZf
YWVhZC5rbyAob3Ugc2ltaWxhaXJlKSBlbiBESVNBQkxFRC1hbGdpZl9hZWFkLmtvCj4gKGlsIG4n
eSBhIHBsdXMgZGUgY29kZSAtPiBpbCBuJ3kgYSBwbHVzIGRlIHJpc3F1ZSkuClJlbGF0aXZlbWVu
dCDDqXF1aXZhbGVudC4gVW4gcGV1IHBsdXMgYGBib3VycmluJycsIG1haXMgdGFudCBxdSfDoCBm
YWlyZToKcG91cnF1b2kgcmVub21tZXIgdW4gZmljaGllciBxdWkgbmUgdGUgc2VydmlyYSDDoCBy
aWVuIHNpbm9uIMOgIGNvbXByb21ldHRyZQp0YSBtYWNoaW5lLiBQb3VyIG1vaSBsYSBtw6l0aG9k
ZSBgYGJvdXJyaW4nJywgc2VyYWl0OgogICMgZmluZCAvbGliL21vZHVsZXMvIC10eXBlIGYgLW5h
bWUgYWxnaWZfYWVhZC5rbyAtZGVsZXRlCgpNYWlzIGplIHByw6lmw6hyZSBsYSBtw6l0aG9kZSBy
ZWNvbW1hbmTDqWUsIHBsdXMgc3lzdGVtLWZyaWVuZGx5Li4uCgpNb24gYGDDsm5lbGluZXInJyBx
dWUgamUgY29sbGUgcGFydG91dDoKCiAgIyBlY2hvICdpbnN0YWxsIGFsZ2lmX2FlYWQgL2Jpbi9m
YWxzZScgPi9ldGMvbW9kcHJvYmUuZC9kaXNhYmxlLWFsZ2lmLWFlYWQuY29uZiAmJiBlY2hvIGRv
bmUuICYmIHJtbW9kIGFsZ2lmX2FlYWQKClNpIGplIHBldXggbGlyZToKCiAgZG9uZS4KICBybW1v
ZDogRVJST1I6IE1vZHVsZSBhbGdpZl9hZWFkIGlzIG5vdCBjdXJyZW50bHkgbG9hZGVkCgpjJ2Vz
dCBxdWUKIC0gYydlc3QgZmFpdAogLSBsZSBtb2R1bGUgbidhIHBhcyDDqXTDqSBjaGFyZ8OpIGF2
YW50IG1vbiBwYXNzYWdlLgoKU2kgamUgbmUgbGlzIHF1ZSBsYSBsaWduZSBgYGRvbmUuJycgYWxv
cnMKIC0gICMgZWNobyAzID4gL3Byb2Mvc3lzL3ZtL2Ryb3BfY2FjaGVzCiAtIHMnYXNzdXJlciBx
dSdvbiBlc3QgYmllbiBzZXVsIHN1ciBsYSBtYWNoaW5lOiBgYHcnJywgYGB3aG8nJywgYGBsYXN0
JycKIC0gc2NhbiBlbiBwcm9mb25kZXVyIGRlIGxhIG1hY2hpbmUsCiAtIHJlYm9vdAogLSBhbmFs
eXNlIGRlcyBsb2dzCgo+ID4gQXV0cmUgcXVlc3Rpb24gY29uY2VybmFudCB1biBjb250YWluZXIg
TFhDLiBRdWVsbGUgYXJib3Jlc2NlbmNlIHZvaXQKPiA+IGFsb3JzIHVuIGF0dGFxdWFudCBxdWkg
YSByw6l1c3NpIMOgIG9idGVuaXIgbGUgcHJpdmlsw6hnZSByb290IGRlcHVpcwo+ID4gbCdpbnTD
qXJpZXVyIGR1IGNvbnRhaW5lciA/CkxlIGBgZMOpZmF1dCcnIHF1ZSBqJ2FpIHJlbGV2w6kgZXN0
IHF1ZSBsJ2V4cGxvaXQgbmUgY2hhbmdlIHBhcyBsZSBHSUQuCkRvbmMgc2kgdHUgdHJvdXZlIGRl
cyBlbnRyw6llcyAoZmljaGllciwgZG9zc2llciBvdSBhdXRyZSkgZG9udCBsJ1VJRApkdSBwcm9w
cmnDqXRhaXJlIGVzdCAwIGV0IGxlIEdJRCBwcm9wcmnDqXRhaXJlIGNvcnJlc3BvbmQgYXUgR1VJ
RCBkJ3VuCnV0bGlzYXRldXIgcGFydGljdWxpZXIsIGFsb3JzIGwnZW50csOpZSBlc3Qgc3VzcGVj
dGUhIChFdCB0dSBjb25uYWlzIGxlCkdVSUQgZGUgbCdhdHRhcXVhbnQuKQoKLi4uIFNhdWYgc2kg
bCdleHBsb2l0IG4nZXN0IHBhcyBjZWx1aSBxdWUgaidhaSB0ZXN0w6kuIElsIGRvaXQgw6p0cmUK
cG9zc2libGUgZGUgY29uY2V2b2lyIHVuIHNoZWxsY29kZSBwbHVzIGFib3V0aSwgbWFpcyBjb21t
ZSBsYSBwbHVwYXJ0CmRlcyBwaXJhdGVzIG5lIHNvbnQgcGFzIGRlcyBoYWNrZXJzLCBvbiBwZXV0
IHMnYXR0ZW5kcmUgw6AgY2UgcXUnaWxzCnV0aWxpc2VudCBMRSBwZXRpdCBweXRob24gcXVpIGNp
cmN1bGUuLi4gY29tbWUgdG91dCBsZSBtb25kZS4KCkV0IGVuY29yZSB1bmUgZm9pczogbGEgY29t
bWFuZGUgYGBsYXN0JycgYWZmaWNoZSBsZXMgZGVybmllcnMgbG9naW5zLgoKPiBKJ2F1cmFpcyBs
J2ltcHJlc3Npb24sIHNhbnMgbCdhdm9pciB0ZXN0w6llLCBxdSd1biB1dGlsaXNhdGV1ciBub24g
cm9vdAo+IHF1aSB1dGlsaXNlIGwnZXhwbG9pdCBhdmVjIHN1Y2PDqHMgZGV2aWVudCBsYSBtw6pt
ZSBjaG9zZSBxdWUgcydpbCBhdmFpdAo+IGV1IGxlcyBkcm9pdHMgc3VkbyBkYW5zIGxlIGNvbnRl
bmV1ciBldCBhdmFpdCB0YXDDqSBzdWRvIC1zLiBDZSBxdSdpbAo+IHBldXQgZmFpcmUgZW5zdWl0
ZSBkw6lwZW5kIGR1IHR5cGUgZGUgY29udGVuZXVyIChub24gcHJpdmlsw6lnacOpIG91Cj4gcHJp
dmlsw6lnacOpZSkgZXQgZGVzIHLDqGdsZXMgTUFDIChhcHAtYXJtb3IgcC5leC4pIGV0IGRlcyBu
YW1lc3BhY2VzIG1pcwo+IGVuIHBsYWNlLgpNw6ptZSBzZW50aW1lbnQuCgo+IE1hbnF1ZSBkZSBw
b3QsIHNpIHR1IHRvdXJuZXMgS3ViZXJuZXRlcywgaWwgeSBhIGFwcGFyZW1tZW50IHRvdWpvdXJz
Cj4gdW4gY29udGVuZXVyIHF1aSBlc3QgcHJpdmlsw6lnacOpIFsxXS4gRG9uYywgc3VpdmFudCB0
YSBjb25maWd1cmF0aW9uCj4gb3Ugc2kgdG91dCDDoCBjb3VwIHR1IHV0aWxpc2VzIEt1YmVybmV0
ZXMgZXQgcXUndW4gc2V1bCBkZXMgY29udGVuZXVycwo+IHRvdXJuZSBkdSBjb2RlIGRlIHRpZXJz
LCBsJ2F0dGFxdWFudCBwb3VycmFpdCBhdHRhcXVlciBjZSBjb250ZW5ldXIsCj4gZG9uYyBhdHRh
cXVlciB0b3VzIGxlcyBjb250ZW5ldXJzIGVuIGNvd2ZzIHN1ciBsZSBtw6ptZSBob3N0LCBkb25j
Cj4gYXR0YXF1ZXIgY2UgY29udGVuZXVyIHByaXZpbMOpZ2nDqSwgZXQgYXZlYyBsZXMgcHJpdmls
w6hnZXMgc3VwcGzDqW1lbnRhaXJlcywKPiAiZW50cmVyIiBkYW5zIGxlIGhvc3QuCkludMOpcmVz
c2FudCEgQSB0ZXN0ZXIhCgo+IENlbGEgbW9udHJlIGF1c3NpIHF1ZSBsZXMgYXR0YXF1ZXMgZCdh
dWpvdXJkJ2h1aSBzb250IHRyw6hzIHNvdXZlbnQKPiBtdWx0aWZvcm1lcywgcGFyZm9pcyBjb21w
bGV4ZXMsIHBhcmZvaXMgbW9pbnMgZXQgcXVlIGxhIG5vdGlvbgo+IGQnaXNvbGF0aW9uIChvdSBt
w6ptZSBkJ2Fic3RyYWN0aW9uIGluZm9ybWF0aXF1ZSkgZGV2aWVudCB0csOocwo+IHJlbGF0aXZl
LgpMJ2luZm9ybWF0aXF1ZSBjJ2VzdCB0csOocyBzaW1wbGUsIGNlIG5lIHNvbnQgcXVlIGRlcyAx
IGV0IGRlcyAwLgpMZSB0cnVjLCBjJ2VzdCBxdSdpbCB5IGVuIGEgZGUgcGx1cyBlbiBwbHVzLi4u
LgoKLS0gCiBGw6lsaXggSGF1cmkgIC0gIDxmZWxpeEBmLWhhdXJpLmNoPiAgLSAgaHR0cDovL3d3
dy5mLWhhdXJpLmNoCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f
X19fCmd1bGwgbWFpbGluZyBsaXN0Cmd1bGxAZm9ydW0ubGludXgtZ3VsbC5jaApodHRwczovL2Zv
cnVtLmxpbnV4LWd1bGwuY2gvbWFpbG1hbi9saXN0aW5mby9ndWxs