Re: A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill
Discussion of splitting rare Linux kernel modules like PPPoE and SCTP into separate packages to reduce attack surface after four local root vulns.
A follow-up in the oss-security thread on four Linux kernel local privilege escalation vulnerabilities dubbed DirtyAH6, PPPoEject, TUNderflow, and DiagSpill. Kevin Riggle proposes packaging rarely used kernel modules such as PPPoE and SCTP separately in distributions so that most users avoid installing them, echoing Hanno's suggestion that this would meaningfully reduce attack surface. No CVE identifiers are cited in this reply.
- Proposes separate distro packages for less-common modules like PPPoE and SCTP
- Aims to reduce local root exposure for users not using these protocols
- References the DirtyAH6, PPPoEject, TUNderflow, and DiagSpill vulnerabilities
- Vendors
- Linux
- Products
- Linux kernel
From the original article
Posted by Kevin Riggle on Sep 18 Would it be as conceptually straightforward on the distro side as breaking most of these less-common modules out into their own packages, e. g. linux-module-pppoe, linux-module-sctp, etc?
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.