Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://mstdn.social/users/msw/statuses/115181260575461122">Matt "msw" Wilson (msw@mstdn.social)'s status on Thursday, 11-Sep-2025 14:10:06 JST</a><a href="https://mstdn.social/@msw" title="msw@mstdn.social"><img src="https://gnusocial.jp/avatar/25406-48-20221113054622.webp" width="48" height="48" alt='Matt "msw" Wilson' style="position: absolute; left: 0; top: 0;">Matt "msw" Wilson</a><div><a href="https://mastodon.chester.id.au/@jacques/115175649619934322" rel="in-reply-to">in reply to</a><ul><li><li><a href="https://gnusocial.jp/user/101452" title="gregkh@social.kernel.org">Greg K-H</a></li><li><a href="https://gnusocial.jp/user/245040" title="jacques@mastodon.chester.id.au">Jacques Chester</a></li></ul></div></section><article><p><a href="https://mastodon.chester.id.au/@jacques">@jacques</a> <a href="https://mastodon.social/@bagder">@bagder</a> <a href="https://social.kernel.org/users/gregkh">@gregkh</a> I'd really love to have some public database that would help us all collectively make more efficient resource allocation decisions.</p><p>Let's take CVE-2025-38352 for example. CISA added it to the KEV because Google said that there is evidence of exploitation in the context of Android.</p><p>If you use CONFIG_POSIX_CPU_TIMERS_TASK_WORK=y the fix is not needed.</p><p>Linux distros aren't affected but release "fixes" anyway. <a href="https://forums.rockylinux.org/t/rocky-8-10-cve-2025-38352/19590/3" rel="nofollow">https://forums.rockylinux.org/t/rocky-8-10-cve-2025-38352/19590/3</a></p><p><a href="https://mstdn.social/tags/PatchAllTheThings" rel="tag">#PatchAllTheThings</a>! <a href="https://mstdn.social/tags/InfoSec" rel="tag">#InfoSec</a></p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/5617361#notice-11027871">In conversation</a><time datetime="2025-09-11T14:10:06+09:00" title="Thursday, 11-Sep-2025 14:10:06 JST">about 10 months ago</time> <span>from <span><a href="https://mstdn.social/@msw/115181260575461122" rel="external" title="Sent from mstdn.social via ActivityPub">mstdn.social</a></span></span><a href="https://mstdn.social/@msw/115181260575461122">permalink</a><h4>Attachments</h4><ol><li><article><header><div>Domain not in remote thumbnail source whitelist: us1.discourse-cdn.com</div><h5><a href="https://forums.rockylinux.org/t/rocky-8-10-cve-2025-38352/19590/3#PatchAllTheThings">Rocky 8.10 - CVE-2025-38352</a></h5><div></div></header><div>OK, I’m busy waiting.  Regarding Rocky 9: We also use a machine with kernel 5.14.0-570.37.1.el9. On this machine, the kernel parameter CONFIG_POSIX_CPU_TIMERS_TASK_WORK=y is effective.  If I understand correctly, this means that the problem does not occur.  Regards</div><footer></footer></article></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
Matt "msw" Wilson (msw@mstdn.social)'s status on Thursday, 11-Sep-2025 14:10:06 JSTMatt "msw" Wilson
in reply to
@jacques @bagder @gregkh I'd really love to have some public database that would help us all collectively make more efficient resource allocation decisions.
Let's take CVE-2025-38352 for example. CISA added it to the KEV because Google said that there is evidence of exploitation in the context of Android.
If you use CONFIG_POSIX_CPU_TIMERS_TASK_WORK=y the fix is not needed.
Linux distros aren't affected but release "fixes" anyway. https://forums.rockylinux.org/t/rocky-8-10-cve-2025-38352/19590/3
#PatchAllTheThings! #InfoSec
In conversationabout 10 months ago from mstdn.socialpermalink
Attachments
1. Domain not in remote thumbnail source whitelist: us1.discourse-cdn.com
  Rocky 8.10 - CVE-2025-38352
  OK, I’m busy waiting. Regarding Rocky 9: We also use a machine with kernel 5.14.0-570.37.1.el9. On this machine, the kernel parameter CONFIG_POSIX_CPU_TIMERS_TASK_WORK=y is effective. If I understand correctly, this means that the problem does not occur. Regards

Public

Embed Notice

HTML Code

Corresponding Notice