|
|
Log in / Subscribe / Register

SUID needs to go

SUID needs to go

Posted Apr 30, 2026 8:53 UTC (Thu) by bluca (subscriber, #118303)
Parent article: A security bug in AEAD sockets

In other news, reason #1203129037812 why SUID binaries need to go

to post comments

SUID needs to go

Posted Apr 30, 2026 8:58 UTC (Thu) by chris_se (subscriber, #99706) [Link]

It's not just SUID though, from reading through the exploit - you could also replace the cached page of /etc/passwd or /etc/shadow, for example - the SUID variant was just the easiest possible way to exploit this.


Copyright © 2026, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds