Hacker News new | ask | show | jobs
by byron3256 55 days ago
How about blacklisting algif_aead initialization function on RHEL 9/10? I added "initcall_blacklist=algif_aead_init" to the kernel boot options and rebooted. The exploit is not working anymore.
1 comments
m3nu 55 days ago
Good idea. Added to the playbook for RHEL only.

On Debian normal unloading of the module works.

link