security/wiki
8
0
Fork 1
generated from sig_core/wiki-template
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Compare commits

base: security:f91c83801ab3e741df73357369b9f12744d37aa7
Branches Tags
security:main
security:gh-pages
...
compare: security:ce94068981e82925bb47b216e92bde751d98c49f
Branches Tags
security:gh-pages
security:main

2 Commits
f91c83801a ... ce94068981

Author SHA1 Message Date
Neil Hanlon
ce94068981 Merge pull request 'issues/CVE-2024-1086.md: Hopefully fix mitigations list formatting' (#28) from solardiz-patch-26 into main
All checks were successful
mkdocs build / build (push) Successful in 28s
Details 
Reviewed-on: #28
Reviewed-by: Neil Hanlon <neil@noreply@resf.org>
 2024-03-28 19:37:45 +00:00
Solar Designer
f799941890 issues/CVE-2024-1086.md: Hopefully fix mitigations list formatting 2024-03-28 20:33:56 +01:00
1 changed files with 2 additions and 2 deletions
Show Stats Expand all files Collapse all files

4
docs/issues/CVE-2024-1086.md
View File

@ -22,7 +22,7 @@ Both EL9 and EL8 are affected. We will of course rebuild upstream's fix as soon
Meanwhile, we recommend two mitigations: Meanwhile, we recommend two mitigations:
1. If you don't use containers, we recommend that you disable user namespaces e.g. by running the below commands as root: - If you don't use containers, we recommend that you disable user namespaces e.g. by running the below commands as root:
``` ```
echo user.max_user_namespaces=0 > /etc/sysctl.d/userns.conf echo user.max_user_namespaces=0 > /etc/sysctl.d/userns.conf
@ -32,7 +32,7 @@ sysctl -p /etc/sysctl.d/userns.conf
This is a mitigation also suggested by Red Hat. This is a mitigation also suggested by Red Hat.
It is expected to fully mitigate this and other/future related vulnerabilities. It is expected to fully mitigate this and other/future related vulnerabilities.
2. Install our [package of LKRG](../packages/lkrg.md), start and enable the service. - Install our [package of LKRG](../packages/lkrg.md), start and enable the service.
This does not fully mitigate the vulnerability, This does not fully mitigate the vulnerability,
but it reliably prevents the specific exploit referenced above from working and produces LKRG alerts when the exploit is run. but it reliably prevents the specific exploit referenced above from working and produces LKRG alerts when the exploit is run.