Commit which introduced the problem: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/lin...
The nested switch/case with return in the default path, then expecting fall-through, looks bogus to me.
The nested switch/case with return in the default path, then expecting fall-through, looks bogus to me.
> My understanding is he also didn’t truly prioritize deep pocketed violators (no suit against VMWare, afaik) - he prioritized that delicious sweet spot of “deep enough to pay me off, but too small to make it realistic to fight me in court”. And, again, he was uninterested in remediation of even minor and unintentional violations - he wanted cash. It seems unlikely this was helping the cause of free software.
Seems entirely possible that such a character would knowingly insert a backdoor to sell as a 0-day.
you can think of unprivileged namespaces in general as a bunch of attack surface that was previously root to kernel only and hadn't had much scrutiny. these bugs will take decades to eliminate without a rewrite of linux.
https://bugs.launchpad.net/bugs/cve/2024-1086
> A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT. We recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.