The io_uring could still be unfixed in mainline, as no one has actually identified the fix, perhaps it only went into stable
Today from the tales of "always use really fresh #Linux #kernel versions, as they fix security issues not yet disclosed":
* use-after-free in io_uring (fixed in 5.10.2)
https://www.openwall.com/lists/oss-security/2021/02/05/4 …
* local priv escalation via futexes (fixed in 5.10.12)
https://www.openwall.com/lists/oss-security/2021/01/29/1 …pic.twitter.com/eMFJP03FUy
-
-
-
Hmmm. But that afaics would be a odd case, as the stable maintainers only accept changes for stable that are already in mainline. They are pretty strict on that (one exception: they sometimes [have to] accept security fixes where only a similar change was mainlined).
- Pokaż odpowiedzi
Nowa rozmowa -
-
-
and updating to a new kernel is super easy, e.g. for Ubuntu 20: https://linuxhint.com/update_ubuntu_kernel_20_04/ … Recently had to do this for a iOS 14.x tethering bug
-
Sorry, but I wouldn't call that "super easy". Super easy IMHO would be: add a repo definition (for example with wget or by installing a package), and just regularly upgrade system wit apt, dnf et. al. This comes pretty close: https://fedoraproject.org/wiki/Kernel_Vanilla_Repositories …
- Pokaż odpowiedzi
Nowa rozmowa -
Wydaje się, że ładowanie zajmuje dużo czasu.
Twitter jest przeciążony lub wystąpił chwilowy problem. Spróbuj ponownie lub sprawdź status Twittera, aby uzyskać więcej informacji.