CIRCLE WITH A DOT

Keep calm that they keep on coming... Better fire up you mitigations because this is probably going to take a while to patch fully.

Re: [PATCH net v2] net: skbuff: propagate shared-frag marker through frag-transfer helpers - Sultan Alsawaf

(lore.kernel.org)

#fragnesia #linux #lpe

@mttaggart
> This is a separate bug in the ESP/XFRM from dirtyfrag which has received its own patch.

pocs/fragnesia at main · v12-security/pocs

poc it like it's hot. Contribute to v12-security/pocs development by creating an account on GitHub.

GitHub (github.com)

@mttaggart but there's a new kernel patch

And another...

Fragnesia Made Public As Latest Linux Local Privilege Escalation Vulnerability

Following last week's disclosure of the Dirty Frag vulnerability for the Linux kernel, which only finished being patched up in mainline on Monday, Fragnesia is now public as a similar local privilege escalation (LPE) vulnerability.

(www.phoronix.com)

#linux #lpe #fragnesia

@eskealler I think that that it's biggest "issue". We all want to migrate to open standards and all, but the data still lives on the "old" places (again, specially on the enterprise world)

@kde @sovtechfund

@eskealler yep didn't even knew there was a rewrite. Maybe that would bring more plug-ins/integrations (you know, as much as I don't like o365/drive, enterprise entities do used them, but that's another conversation on itself)

@kde @sovtechfund

@eskealler yep. it probably works (because it shows there), but even with an online account setup it still asks me for a password on dolphin (and i don't wanna give it an App Password)

@kde @sovtechfund

@kde Yeah of course. I kinda assumed that the NC (example) would be included that's why I asked about the other ones. (the grey area that is kinda common between all)

@eskealler @sovtechfund

@eskealler no. was more of "Drives being available on Dolphin" for example. It's possible to configure the online accounts, but the "FS integration" kinda lacks.

@kde @sovtechfund

@eskealler I do use it but even that one needs some love (not the NC client, the integration)

@kde @sovtechfund

@kde well... i do agree with that statement as is. but the world isn't just black and white

@sovtechfund

@kde any chance we see some of that go to online drives (o365/google)?

@sovtechfund

#HTB #HackTheBox #Silentium