[Bug 295485] need a way to block zfs.ko from being autoloaded by tools like puppet and facter (FatGID Vuln / CVE-2026-45250)

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=295485

Dan Mahoney <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|New                         |Closed
         Resolution|---                         |FIXED

--- Comment #26 from Dan Mahoney <[email protected]> ---
(In reply to Gordon Tetlow from comment #24)

It feels to me like maybe you’ve only read my initial post and not any of the
follow up.

Yes, I absolutely understand that. at this point, we are fully patched across
the board and were within a day.  Again, some things had to wait until the
maintenance window (as in, close of business hours that day) because we can’t
reboot database servers “just because”.

It was way better than some of the Linux exploits we’ve only been able to apply
workarounds on (not patch) in the last couple weeks because the vulnerabilities
were leaked. It’s not been a great week.

If you think I am opening this issue because we need to close it to patch the
vulnerabilities, you misunderstand my point.

-Dan

-- 
You are receiving this mail because:
You are the assignee for the bug.