←back to thread

Kernel-hack-drill and exploiting CVE-2024-50264 in the Linux kernel

(a13xp0p0v.github.io)
239 points r4um | 2 comments | 03 Sep 25 06:58 UTC | HN request time: 0.738s | source
Show context
charcircuit ◴[03 Sep 25 09:05 UTC] No.45113673[source]▶
>Convinced the path forward would be painful, I shelved the bug.

As opposed to fixing the bug? Either the incentives are broken for security researchers to fix bugs, contributing fixes to Linux is broken, or both.

A rewrite of these user interactable subsystems in Rust can't come soon enough.

replies(4): >>45113715 #>>45113831 #>>45113876 #>>45114005 #
ch3 ◴[03 Sep 25 09:10 UTC] No.45113715[source]▶
The author is Russian and seems to work for Positive Technologies, which is on the sanctions list.
replies(2): >>45113836 #>>45114504 #
darkwater ◴[03 Sep 25 11:29 UTC] No.45114504[source]▶
But he has an @linux.com email address though.
replies(1): >>45114597 #
1. koakuma-chan ◴[03 Sep 25 11:42 UTC] No.45114597[source]▶
What the hell is linux.com? .com is for commercial.
replies(1): >>45115325 #
2. darkwater ◴[03 Sep 25 13:11 UTC] No.45115325[source]▶
"Linux.com is brought to you by The Linux Foundation, the organization of choice for the world’s top developers and companies to build ecosystems that accelerate open technology development and commercial adoption. Please see www.linuxfoundation.org for more information on The Linux Foundation, its mission and its members. "

https://www.linux.com/about/