Bug #15095

Mitigate BPF security issues

Added by intrigeri 2017-12-23 08:50:16 . Updated 2019-07-19 16:45:24 .

Status:
Rejected
Priority:
High
Assignee:
intrigeri
Category:
Target version:
Tails_3.5
Start date:
2018-06-11
Due date:
% Done:

100%

Feature Branch:
Type of work:
Code
Blueprint:

Starter:
Affected tool:
Deliverable for:

Description

https://www.decadent.org.uk/ben/blog/bpf-security-issues-in-debian.html

Seems important (at least LPE and probably remotely exploitable given Ben blogged about it; public exploit is in the wild). It might impact Bug #15018.

Subtasks

Related issues

Related to Tails - Bug #15094: Mitigate BPF security issues on our infrastructure Resolved 2017-12-23
Related to Tails - Bug #15018: Decide if we do a Tails 3.3.1 emergency release Resolved 2017-12-06

History

#1 Updated by intrigeri 2017-12-23 08:50:31

  • related to Bug #15094: Mitigate BPF security issues on our infrastructure added

#2 Updated by intrigeri 2017-12-23 08:52:13

  • related to Bug #15018: Decide if we do a Tails 3.3.1 emergency release added

#3 Updated by intrigeri 2017-12-23 08:54:16

  • Status changed from Confirmed to Rejected

Actually we’ve already disabled unprivileged BPF in Tails 2.10. Hardening & security in depth sometimes works :)