Remix.run Logo
▲ bawolff a day ago

> The post gives no details about what this vulnerability is

It is a very famous vulnerability that has been all over tech news sites. Sometimes it is ok to assume the audience has the slightest bit of background knowledge about the topic at hand.

▲paxy a day ago | parent [-]

If it is really so famous and obvious then why has Ubuntu marked it not critical?

▲gratzdasdajok 13 hours ago | parent | next [-]

Congratulations. You solved it. You figured out why the article exists.

Here's 1000 picarats.

▲bawolff a day ago | parent | prev [-]

hence the headline of the post.

▲paxy 20 hours ago | parent [-]

Neither the headline nor the writeup itself explains it. The fact that there are 500+ comments on this post and not a single one has explained why exactly this CVE needs to be fixed with urgency tells me that Ubuntu's decision is likely the correct one.

▲rogeliodh 19 hours ago | parent [-]

The explanation is everywhere: it can lead to RCE , researchers achieved it with mptcp but nothing prevents attackers finding another mechanism. Yes, it is hard to exploit it outside mptcp but nobody has demonstrated it is impossible, so we should be cautious and tag it as urgent