Making Tech Headlines · Page 4

Linux Researchers Find a Door That Opens Straight to Root

Anthropic security researchers have developed an exploit for a critical Linux kernel vulnerability that can allow unauthenticated remote attackers to execute commands as root on servers running Multipath TCP listeners, according to BleepingComputer. Multipath TCP allows a connection to use more than one network path. On an affected server, the vulnerability puts a powerful level of access within reach without requiring the attacker to log in first. Root is the system's top administrative account, so access at that level can carry consequences well beyond an ordinary user account. The reported exploit concerns servers running MPTCP listeners, not every Linux system simply by virtue of running Linux. That qualification is important for administrators assessing their exposure and planning a response. The researchers' demonstration also establishes an exploit, rather than proving that every affected server has already been attacked. The technical contrast is awkward: a feature designed to give network connections more than one path has produced a route to the most privileged account. Administrators are left with the familiar task of checking which services are exposed and following available security updates. The kernel is supposed to be the part of the system that enforces boundaries. In this case, the boundary needs some attention before the guest list becomes a root access list.

Read this story in the full newspaper →

Satire. Not factual reporting. Read the original reporting from the linked publishers.