New answers tagged

2

this is false positive because I am not using this version on the server? Yes and no. It's an issue because the vulnerable version is installed, and can be loaded at any reboot by the user/operator. But at the moment, the running kernel is not the vulnerable one. So it indeed have the vulnerable version installed, but don't have the vulnerable version ...


1

I think you are mixing up concepts. Encryption is to hide something and since you publish the source code anyway there is no reason to hide it. But you tagged "secure boot" and this is more what you probably want in terms of information security. Secure boot does not care about hiding stuff but it is about making sure that only the intended code runs. It ...


1

The layout of a distribution precompiled kernel is public. KASLR attempts to change the base offset of the kernel, changing all the addresses by a secret offset. Unfortunately, leaking even a single symbol will allow the rest to be calculated. Since KASLR is not nearly as secure as it is made out to be, this is a problem. The danger of KASLR bypass through ...


Top 50 recent answers are included