The new zero-day vulnerability discovered in the Linux kernel highlights the challenges of securing Linux devices that cannot be easily updated. Administrators have access to standard update tools to promptly patch Linux desktops and servers, but a significant segment of Linux devices will remain vulnerable.
The privilege escalation vulnerability allows applications to exploit the kernel as a local user and gain root access, said Yevgeny Pats, co-founder and CEO of Perception Point, which found the vulnerability. It’s present in the Linux kernel 3.8 and higher, impacting “tens of millions” of both 32- and 64-bit Linux PCs and servers. Because Android uses the Linux kernel, the vulnerability is also present in all Android devices running KitKat or higher, which accounts for about 66 percent of current users. Linux is also commonly found in embedded systems and the Internet of things, making this a widespread issue.
To read this article in full or to leave a comment, please click here