A public outing of severe and unfixed Linux kernel vulnerabilities should have you thinking of updating your SteamOS or other distros to beta branches
The accidental reveal of unpatched vulnerabilities as high as 9 on the CVSS score chart is a little worrisome.
A recent public mishap involving the Linux kernel has highlighted the need for users to consider migrating to beta branches for updated security patches. An unsecured mailing list inadvertently leaked a list of high-priority vulnerabilities, most of which remain unpatched in the main kernel. These issues range from remote code execution to local privilege escalation, scoring as high as a 9 on the CVSS security scale.
Some of these vulnerabilities, such as ZDI-CAN-33549 and ZDI-CAN-33774, have patches in the works, including one slated for the upcoming Linux kernel v7.5. However, others remain open to attack, underscoring the urgency for users to consider beta branches for enhanced security.
Written by urgent.news from PC Gamer's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
- Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes thehackernews.com
- Several Linux Kernel Vulnerabilities Accidentally Posted To Public Kernel Mailing List it.slashdot.org
- Several Linux kernel vulnerabilities accidentally posted to public mailing list phoronix.com
