CVE-2022-0847 "Dirty Pipe"

[Ralf Mardorf]

On Tue, 8 Mar 2022 18:28:19 +0100, Carsten Agger wrote:
>I may have a computer or two to turn off tomorrow if there's no fix
>available.

Hi,

there are a few LTS kernels < 5.8 available. Before building your
own kernel package you probably will check a different kernel against
known vulnerabilities. Some might not suffer from something that
bad, as the Dirty Pipe vulnerability. Each released kernel has got
known vulnerabilities. At least I'm not aware of a kernel that was
released and did not have a known vulnerability already when it was
released.

"longterm: 5.4.182
longterm: 4.19.232
longterm: 4.14.269
longterm: 4.9.304" - https://www.kernel.org/

I'm in favour of building 4.19 kernels, for other, but security reasons.
Reasons such as being able to continue using the discontinued X Intel
graphics driver.

At the moment I only build kernels for Arch Linux, but some time ago I
also build countless Ubuntu kernel packages. It's straight forward, no
rocket science.

Regards,
Ralf