Re: Federal agency warns critical Linux vulnerability being actively exploited | Ars Technica
Ted Pomeroy <[email protected]> Mon, 3 Jun 2024 13:44:54 -0600
| Newsgroups | gmane.org.user-groups.linux.nmglug |
|---|---|
| Message-ID | <CAM7Qav8GZmFMiJ1vKCAH9404DnBDiDzSScKfra4eS5BhGbX70Q@mail.gmail.com> |
--===============2157634363425059704== Content-Type: multipart/related; boundary="000000000000f750f5061a01915d" --000000000000f750f5061a01915d Content-Type: multipart/alternative; boundary="000000000000f750f3061a01915c" --000000000000f750f3061a01915c Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Brian, Probably not at all. Note the breadth of the problem and the level. It affects a broad range of kernels, and will be attended to by the people who can address this at the kernel level. Keep an eye on updates, that is do them regularly, but no need to panic. I am assuming you are not running the servers for Cisco or AWS, just doing personal business on your machine. You do turn it off at night? I usually like to be aware of the issues, but have confidence in the people at the kernel and OS levels who can address any issue, whether in the kernel, the OS or any application I am likely to use. I also try to be aware of my system's usual behaviors: amount of ram and cpu in normal use, speed of my applications and the loading of webpages. These are inexact, but for a personal computer at my level of involvement seem good enough. I am a bit cavalier about issues as a fresh install(after the issues has been addressed) can remedy any severe issues and I don't have my machine too heavily tweaked that I cannot start over again. I will eat my words if I do lose some files I have failed to back up recently, but that's the extent of my vulnerability. I do also try to read up on "Gnu/Linux news" as a topic several times a week. When an issue hits I will look for the remedy being developed or implemented in a timely way. This one could be tricky, since it is in the kernel. It is also a kernel piece that has been retained over a long period. I will look at the release dates for the 5.14 and 6.6 kernels to see how long. Hang in there and don't fret. Thank you, Ted P On Sun, Jun 2, 2024 at 2:05=E2=80=AFPM Brian O'Keefe <[email protected]>= wrote: > Is this a problem for someone like me? Are folks aware of it? > > $ uname -r > 5.4.0-182-generic > > > > https://arstechnica.com/security/2024/05/federal-agency-warns-critical-li= nux-vulnerability-being-actively-exploited/?comments=3D1&comments-page=3D1 > -- > _______________________________________________ > nmglug mailing list > [email protected] > http://lists.nmglug.org/listinfo.cgi/nmglug-nmglug.org > --000000000000f750f3061a01915c Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr"><div class=3D"gmail_default" style=3D"font-size:large">Bri= an, Probably not at all. Note the breadth of the problem and the level. It = affects a broad range of kernels, and will be attended to by the people who= can address this at the kernel level. Keep an eye on updates, that is do t= hem regularly, but no need to panic. I am assuming you are not running the = servers for Cisco or AWS, just doing personal business on your machine. You= do turn it off at night?</div><div class=3D"gmail_default" style=3D"font-s= ize:large">I usually like to be aware of the issues, but have confidence in= the people at the kernel and OS levels who can address any issue, whether = in the kernel, the OS or any application I am likely to use. I also try to = be aware of my system's usual behaviors: amount of ram and cpu in norma= l use, speed of my applications and the loading of webpages. These are inex= act, but for a personal computer at my level of involvement seem good enoug= h. I am a bit cavalier about issues as a fresh install(after the issues has= been addressed) can remedy any severe issues and I don't have my machi= ne too heavily tweaked that I cannot start over again. I will eat my words = if I do lose some files I have failed to back up recently, but that's t= he extent of my vulnerability. <br></div><div class=3D"gmail_default" style= =3D"font-size:large">I do also try to read up on "Gnu/Linux news"= as a topic several times a week. When an issue hits I will look for the re= medy being developed or implemented in a timely way. This one could be tric= ky, since it is in the kernel. It is also a kernel piece that has been reta= ined over a long period. I will look at the release dates for the 5.14 and = 6.6 kernels to see how long. Hang in there and don't fret. Thank you, T= ed P<br></div></div><br><div class=3D"gmail_quote"><div dir=3D"ltr" class= =3D"gmail_attr">On Sun, Jun 2, 2024 at 2:05=E2=80=AFPM Brian O'Keefe &l= t;<a href=3D"mailto:[email protected]">[email protected]</a>> wrot= e:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0= .8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><u></u> =20 =20 =20 <div> <p>Is this a problem for someone like me? Are folks aware of it?<br> </p> <p>$ uname -r<br> 5.4.0-182-generic<br> </p> <p><br> </p> <a href=3D"https://arstechnica.com/security/2024/05/federal-agency-warns-cr= itical-linux-vulnerability-being-actively-exploited/?comments=3D1&comme= nts-page=3D1" target=3D"_blank">https://arstechnica.com/security/2024/05/fe= deral-agency-warns-critical-linux-vulnerability-being-actively-exploited/?c= omments=3D1&comments-page=3D1</a> <div>-- <br> <img src=3D"cid:ii_18fdf94c5d261a917f31" border=3D"0"></div> </div> _______________________________________________<br> nmglug mailing list<br> <a href=3D"mailto:[email protected]" target=3D"_blank">[email protected]= mglug.org</a><br> <a href=3D"http://lists.nmglug.org/listinfo.cgi/nmglug-nmglug.org" rel=3D"n= oreferrer" target=3D"_blank">http://lists.nmglug.org/listinfo.cgi/nmglug-nm= glug.org</a><br> </blockquote></div> --000000000000f750f3061a01915c-- --000000000000f750f5061a01915d Content-Type: image/png; name="signature.png" Content-Disposition: inline; filename="signature.png" Content-Transfer-Encoding: base64 Content-ID: <ii_18fdf94c5d261a917f31> X-Attachment-Id: ii_18fdf94c5d261a917f31 iVBORw0KGgoAAAANSUhEUgAAANAAAACCCAIAAAC4gNHfAAAABmJLR0QA/wD/AP+gvaeTAAAACXBI WXMAAAsTAAALEwEAmpwYAAAAB3RJTUUH4wUYEwIkERyo9gAAAB1pVFh0Q29tbWVudAAAAAAAQ3Jl YXRlZCB3aXRoIEdJTVBkLmUHAAAOrUlEQVR42u2de1CU5RfHzy67yHIXuQhKIkHAQIpll0FD8II7 hKExjFOUFEKmlqM2kJOCiP1heWsmLzUTNlqRF6SMAMlCCoboQgESICSjcVFgL7CwC+yy+/7+OL/e 2bise9VFzuev5d3nBs+X532fc85zXg7DMEAQ9wou/QkIEhxBgiMIEhxBgiMIEhxBgiNIcARBgiNI cARBgiNIcARBgiNIcAQJjiBIcAQJjiBIcAQJjiCmjODw1EVUVBTnvwQEBBw4cEAikWg0GprIqQLH yg/RDA4OJiUlffPNNzrKPPnkk/Hx8YmJiYGBgQzDcDgcmlcSnDE0NTWFh4crlUo7O7vIyMjY2Fh2 tBwO5/r163l5eaOjo3K5HC+++uqrubm5JDhrv2FZJ2fPnsURenp6NjQ0TFaso6Pj888/X7BgARb2 9va+ePEiQ1grViq4+vp6XKiEQqGeVVpbW/38/FB27733Hk0tCU5f5HK5QCAAgDVr1hhUcWRkZP/+ /ai59PR0ml0SnF4sXboUAFxcXIyrnp6ejpo7c+YMTbC1YV2bBoZhhoaGHBwcHB0d//jjj8DAQOPa OXToEMqOElmQHU7nnpnDiYuLA4CIiAij1QYA27ZtmzdvHu5baY7JLDIpVVVVS5YsMcvKJJPJXFxc 7O3tm5ubfX19aaZphZuAK1euAEB4eLjpTTk5Oa1cuVKhULDmFYLscP9hdHQUzWkFBQVmabC0tNTK bY3TEK5VSf+ff/7h8XizZ882S4MxMTEuLi4A8MILL9DKQrfUsajV6r6+Pj6f7+XlZa4209LSAOD3 33+nmSbBjeXjjz8GAIFA4O/vb642s7KyAEAkEnV2dtJkk+D+Q09PD1pGzNimUqnENrlcivwjwREk uPvI8PAwANjZ2ZmxTVwv/+/FI0hw2hw/fhwAXn/9dTO2+emnnwKAq6urj48PTTYJboIVztHR0Yxt 4l6Bz+fTTJPg7gUzZsxgpUyQ4CzOgQMHACAnJ4dmmgQ3Mba2tuZqqqqqCj+88sorNNMkuLG8++67 AJCRkWGuBr/++msAWLVqFU0zCW4ChoaGwHxmEbVanZuba2Njs3fvXppmEtwELFu2DABUKtXg4KDp rWVlZUkkkkceeQQD7AgrwYoCMFUqla2trUAgaGhoMNGd2t3djSEntbW1CxcupGmmFW4i7XM4np6e SqXSdEf7G2+8AQAxMTGkNhKcLsF5eXmp1WqJRGJKO6Wlpfn5+VwuF10XBAnOgohEoqSkJADIyckJ CAiwXEfknH0QVjg8/yyTyYzemW7ZskUsFgcEBOzevdsSIvvxxx99fX0xfROpZ2oLjsvlPv744wBw /vx541pIT0+/cOEC/GuBMztSqTQqKqqjo8O8Dt9pBc+qRjNz5kwAEIvFRtQ9derU0aNHAaCxsTEk JAQvyuXy1tbW27dvnz592sbGBi9qNJq1a9c+88wzhoaQODo6xsXFdXZ2XrlyhfKCGX+bsB4uX75s 3KgwlBwAdu3axV6Mj4/38fGZLNbXxcUFdWMQKpVKqVTS4asHJNUDANja2qpUqpycnMzMTP3Xto0b NwLAnj179u3b9+2335aWlp44cQK/9fDwcHd3Dw4OZhNlcjicxsbGlpYWABgaGjJvyCcxlVY4hmE2 b94MACEhIXqWZz1XL730kq+vr/bTVURERFFRkVwuHx4eHl8xIiICANzc3AYGBmjhmb7Zk3799VcA 8PLy6uvru2vhxsZGjHjTJjQ0NDExsby8XHfdzs7OOXPmAMCJEydIB9NXcAqFAv1a1dXVd1XMGKlt 27atubl5dHTUoCe/mJgY0sH0FZxGo1mxYgXozCh4586dt99+m42cW7FixcmTJ2/dumVoX9XV1db5 XEGCu6dggK6/v/+E3xYXF7u6urIbgt7eXpN+fwAAOHz4MElh2uUWYdm6dSsAtLW11dfXa1/v6elJ Tk6OjY3t6+sDgKVLl3Z2drq7u5ve4/gHQWIa+VLd3NzwA5sTZHh4uLy83MvL68yZM3hl48aNFRUV ph/Hwtt3cXExSWGamkWQI0eOAEBYWBh+Dg4O1h5zfn6+uTrCfcPMmTP1LH/x4sVLly5dvnxZKBTG xcUdPXqU7pJT/hmOYZhbt24BgIODw5iAtgULFpi3I/Txz5o1S0eZ7u7u5uZmHX6wqqoqHXVb/kUs FuszpL6+PraKPrYhEpwZNqpqtXru3Llj5vXgwYMqlcq8fWVnZ8PkGdMPHjy4ZMkSdo+iTUpKyoYN G9ivtm7dOr76unXrtOs6Ozs3NTXpGIxcLo+Ojtb+xWfPnp2VlUWCsyxisZh9jEP8/f2Li4st0Rfe rFNTU7Uv1tTUjDl64+Pjs3v37glTc+7ZswfLtLa2shdLSkrYLHc+Pj7e3t5oZNbxDLNz5062O+9/ 4fF4M2bM6O7uJsFZisrKyjFHU7dv3z40NGSp3x8AAD744AP8saCgQDv/Jo/HS0lJ6erqkkqlOhpJ Tk4GgE2bNuGPCQkJGJni5ubW29srlUqlUung4ODTTz8NE70lp7e3l/0He/HFF69evSqRSKRSqVgs jo6OxqWdBGcRSkpKQCtFHGYfj4qK0mg0luhuZGQEO8rLyzt16hQGRwHAnDlzIiMjv/jiC/YWf9ed BIfD8fPzGxgYWL58OQDw+fyEhIQxdXFHnJ2drV23vb3dyckJvXlFRUVjWkbP8rPPPkuCMz9qtVp7 YTty5MjNmzednZ0xBtgSPf78889sqBLb7/HjxxUKhVqt1r+duro6XNJwtABQUlIyvoXxguvt7cXy Dz30kEQiGd/ypk2bACA+Pp4Mv+bn2rVrALBw4cL4+PiampodO3bMmzcPFwycKvMik8kwSz8A9Pf3 L168GF+VtGXLFoFAYFDGzEcffRTLy2QyX1/fvr4+oVA4vgUUJRsl1dXVhU+QYWFhLS0t7PpqKBKJ JC0tzd3d3cbGJjc3l+xwBqBUKkdHR8fcwnCcd43+MIjvvvuONRrPnTu3srLSlNb6+/t5PB5GyYtE osmKoWEFZc2ubV5eXjrio1577TUAWLt27WQFzp07x0YyA8DJkyfplmoq6FoVCoVmeZJrampi10sM njM9WgRzpcPdXpuJZWpqaioqKvBzeHi47v3Q999/jyVHRka0r9fW1m7fvt3T01N7H3316lV6hjMD bW1teJrL9L0qniBEsrOzMZnXqlWrTGlzzZo1+liAMc4PAP766y/88Pzzz+vzbIqFk5KSGIa5ceNG Zmbmww8/zIYu83g8Ho+3c+dO2jSYk8TERAAIDg42ZWF74okncJJSU1Pb2toYhlm8eDEAfPLJJ0Y3 W1hYqP2spqPkoUOHsExkZCSubfr/v034LLR+/frCwsKBgQHdJhsSnEkGs59++snQihqNpq6uDmVh Z2en7f1Ew9hHH31k9KjQuhscHKydvXpC8EQZYmdnZ9BqXVZWZm9vz+PxHB0dXV1d09LSyCxiceLj 4wEgIyPDIKkxDLNjxw6c5qioqJ6eHu0Ctra2XC7XuO3I6OhoVFQUWnfz8/PZUIPJKCoqwmF4enr+ 8ssvRvRYXV19584dssPdI3744QcOh2Nvb2+QXXf9+vU4zRMqFU0VdXV1RoynsrISd6ZqtRo3DSkp KbqrvPzyy3R+YipFV6N0Lly4oOfaFhoailXOnj07vszp06fRJWDESMRiMfrf0J2FvVjI20uCu29g Ggd9bIfDw8N+fn4Y6NbR0TFhmV27duEN0YiR4OsJPTw8GIYpKCgAAIFAIJfLSU8PlODYRQttpzrW Nkz14ODgoGMHh26ozMxMQ8fQ29vr7OzM5/P//vtvhmEwDGTC8CRiPFMsXdfq1asB4KuvvtLhOAkI CGhqanJxcamtrdV2kmqjUqkwpbARGQsPHz4sk8kiIiLmz59fX1/f09PD5XKPHTvGUAKvqRtiPhkd HR047MkiGd955x0AcHJy0n2Du3btGnqEjH6UzM3NZVfc5ORkWroezFsqwzAJCQmTGU4rKytRDZcu XdLdyJdffsnhcAIDAw3tHV/qikrNy8sDAHt7+/b2dlLSAys4vBUKBAL0FrAMDg5iPLc+tjrUzVNP PWVo7+vWrUMrf3t7O2bBOX/+PMnoQRacRqMRCoUAkJOTo3193759ABAUFKRPI+i/37t3r0Fdy+Vy 3PzW1NTgOrds2TKDIueIKZnloLy8HOdb22ZrUBQTFjbU4q9QKFjHuSWOkJHgrJcNGzYAQGBgIG4O 0PEVERGhT91z586xMZjGCQ59Hi0tLSSg6SI4uVzu4eGBwdllZWVoDBt/JmBCYmNjAWD58uWGdqpQ KNjM6F1dXaSeaSQ4hmFu376Nx08wb6aHh4c+tn6RSGRvb49xaUZ0un///qCgIFrbjMbqUq4aZEHk cDgZGRlDQ0PHjh0LCQn5888/75qWpqKiIjo6etasWZ2dneh9J6Z7Mhs9wRC0999/H99cExwcrE8S pN9++02tVoeFhRl0TIYgwY2FPQ2lG4xLCw8PJ8GR4IwED7TqKaCysjLcMdDck+CMBI+x3Lx5U6lU 3vUBDj9Y4qArMV0EFx4ezufz29raVCqV7pL4WsvU1FR6NwMJznhCQ0M9PDz6+/s/++wzHcX6+/u7 u7sBAE8XEyQ448GcWZj6ZTKuX7/e3d09f/78sLAwmngSnEls3rwZT+x9+OGHk5XBBGwrV67EY9XE fWEKG37HUFhY+Nxzzzk7O4tEovHJppubmzHuvKOjg80NSNAKZzxCodDGxkYmk8XFxUml0jHf4nn3 N998k9RGK5zZaGlpCQoKws9vvfXW6tWrH3vssfb29kWLFgGAn59fQ0ODg4MDzfr95AHzDbe2tmIM +hgWLVp048YN8p2T894itLW1xcTEKBQKTOGRlpaGaXLpHc50S7Ugg4ODMpmMz+dj5BxBgiNol0oQ JDiCBEcQJDiCBEcQJDiCBEeQ4AiCBEeQ4AiCBEeQ4AiCBEeQ4AgSHEGQ4AgSHEGQ4AgSHEGCIwgS HEGCIwgSHEGCIwgSHHG/+R87RpMZ3KibnwAAAABJRU5ErkJggg== --000000000000f750f5061a01915d-- --===============2157634363425059704== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ nmglug mailing list [email protected] http://lists.nmglug.org/listinfo.cgi/nmglug-nmglug.org --===============2157634363425059704==--