Post
I'm not super familiar with Red Hat, but can someone do a sanity check for me? The recommended mitigation for DirtyFrag is to add the relevant modules to a modprobe blocklist. But...I wasn't aware the modules were loaded dynamically? At least on Fedora, they were not.
I very much want to be wrong about this. And expect I am, but want to be sure.
https://access.redhat.com/security/vulnerabilities/RHSB-2026-003
@mttaggart
The Red Hat mitigation works fine for protecting both Red Hat and Fedora.
@wdormann Thanks. Dunno what to tell ya, lsmod showed none of those modules for me and the exploit still worked. I used a different method to mitigate it.
@wdormann Figured out what I was missing! That kmod loads the module on demand when the exploit demands it, despite what lsmod shows me beforehand. Thanks again!
Install bonfire.cafe
Get the full app experience
