<![CDATA[So, the night is still young, and I need distraction from $MEGACORP B.S., so there goes nothing: let's test #DirtyFrag on #Slackware 15!]]>So, the night is still young, and I need distraction from $MEGACORP B.S., so there goes nothing: let's test on 15!

"The target is /usr/bin/su" - oh bless your soul, you naughty little hacker you...

🧵

]]>https://board.circlewithadot.net/topic/5abb42d1-ee60-440d-85db-25a6a94f9223/so-the-night-is-still-young-and-i-need-distraction-from-megacorp-b.s.-so-there-goes-nothing-let-s-test-dirtyfrag-on-slackware-15RSS for NodeFri, 15 May 2026 02:12:57 GMTThu, 07 May 2026 21:35:29 GMT60<![CDATA[Reply to So, the night is still young, and I need distraction from $MEGACORP B.S., so there goes nothing: let's test #DirtyFrag on #Slackware 15! on Fri, 08 May 2026 07:46:56 GMT]]>@ParadeGrotesque Noticed the same when I checked earlier, wasn't sure if the default 'huge' kernel was vulnerable, but, the (patched) generic kernel w/ my initrd was also fine (even ignoring the /usr/bin/su vs /bin/su difference)
... so, much like with copyfail, I'm left wondering why these modules are loaded by default on so many systems in the first place, since nothing seems to be breaking without them.

]]>https://board.circlewithadot.net/post/https://girlcock.club/users/miss_rodent/statuses/116537846456912556https://board.circlewithadot.net/post/https://girlcock.club/users/miss_rodent/statuses/116537846456912556Fri, 08 May 2026 07:46:56 GMT<![CDATA[Reply to So, the night is still young, and I need distraction from $MEGACORP B.S., so there goes nothing: let's test #DirtyFrag on #Slackware 15! on Thu, 07 May 2026 22:12:44 GMT]]>Once again, like seems overhyped.

Also: running the bleeding edge kernel and distro will get you a nasty bite in the butt. 🤓

I expect to release a new kernel soon to patch

]]>https://board.circlewithadot.net/post/https://mastodon.sdf.org/users/ParadeGrotesque/statuses/116535588614839988https://board.circlewithadot.net/post/https://mastodon.sdf.org/users/ParadeGrotesque/statuses/116535588614839988Thu, 07 May 2026 22:12:44 GMT<![CDATA[Reply to So, the night is still young, and I need distraction from $MEGACORP B.S., so there goes nothing: let's test #DirtyFrag on #Slackware 15! on Thu, 07 May 2026 22:09:24 GMT]]>Conclusion: 15 in its base version does not seem to be affected by provided you have applied all the patches.

Make of that what you will, I am not an expert.

🧵

]]>https://board.circlewithadot.net/post/https://mastodon.sdf.org/users/ParadeGrotesque/statuses/116535575503062065https://board.circlewithadot.net/post/https://mastodon.sdf.org/users/ParadeGrotesque/statuses/116535575503062065Thu, 07 May 2026 22:09:24 GMT<![CDATA[Reply to So, the night is still young, and I need distraction from $MEGACORP B.S., so there goes nothing: let's test #DirtyFrag on #Slackware 15! on Thu, 07 May 2026 22:06:52 GMT]]>Well, the only mitigation published indicates this:

sh -c "printf 'install esp4 /bin/false\ninstall esp6 /bin/false\ninstall rxrpc /bin/false\n' > /etc/modprobe.d/dirtyfrag.conf; rmmod esp4 esp6 rxrpc 2>/dev/null; true"

So, do not load modules esp4, esp6 and rxrpc, which on my Slackware machine is...

$ /sbin/lsmod | grep -i ^esp
esp4 28672 0

$ /sbin/lsmod | grep -i ^rxrpc
rxrpc 290816 0

$ uname -rms
Linux 5.15.204 x86_64

So, no esp6 kernel module.

🧵

]]>https://board.circlewithadot.net/post/https://mastodon.sdf.org/users/ParadeGrotesque/statuses/116535565504936784https://board.circlewithadot.net/post/https://mastodon.sdf.org/users/ParadeGrotesque/statuses/116535565504936784Thu, 07 May 2026 22:06:52 GMT<![CDATA[Reply to So, the night is still young, and I need distraction from $MEGACORP B.S., so there goes nothing: let's test #DirtyFrag on #Slackware 15! on Thu, 07 May 2026 21:59:02 GMT]]>Well, that went about as well as you could expect:

$ git clone https://github.com/V4bel/dirtyfrag.git

$ gcc -O0 -Wall -o exp exp.c -lutil

$ ./exp
dirtyfrag: failed (rc=3)

Mind you, this after editing the 'exp.c' file to replace all occurences of /usr/bin/su to /bin/su

I suspect Slackware 15 and its kernel modules do not contain the vulnerable ones that is targeting.

🧵

]]>https://board.circlewithadot.net/post/https://mastodon.sdf.org/users/ParadeGrotesque/statuses/116535534683868722https://board.circlewithadot.net/post/https://mastodon.sdf.org/users/ParadeGrotesque/statuses/116535534683868722Thu, 07 May 2026 21:59:02 GMT