Two Linux vulnerabilities introduced recently into the Ubuntu kernel create the potential for unprivileged local users to gain elevated privileges on a massive number of devices.
@leo what’s the solution, is it just the normal apt update/upgrade or something more complicated? And is it possible to know if a machine has suffered such attack at all?
@leo what’s the solution, is it just the normal
apt update/upgrade
or something more complicated? And is it possible to know if a machine has suffered such attack at all?According to the Ubuntu bulletin, a simple update is sufficient.
The Wiz announcement didn’t really go into specifics, so not sure other than normal user auditing.