Another vulnerability that gives root access: dirty-frag (FIXED with Linux kernel 7.0.6 Update [finally])

General system Kernel, boot, graphics & hardware
3

This is the mitigation being shared by most sources:

Mitigation

  1. Because the responsible disclosure schedule and the embargo have been broken, no patch exists for any distribution. Use the following command to remove the modules in which the vulnerabilities occur.
sh -c "printf 'install esp4 /bin/false\ninstall esp6 /bin/false\ninstall rxrpc /bin/false\n' > /etc/modprobe.d/dirtyfrag.conf; rmmod esp4 esp6 rxrpc 2>/dev/null; true"
  1. Once each distribution backports a patch, update accordingly.

This will unload (rmmod) and disable three modules:

  • esp4 - IPsec ESP for IPv4 (xfrm subsystem)
  • esp6 - IPsec ESP for IPv6 (xfrm subsystem)
  • rxrpc - RxRPC protocol (used by AFS)

So if you’re currently depending on IPsec, maybe first consider your options before running the proposed mitigation.