Abuse Melding

Je hebt een klacht over de onderstaande posting:

08-05-2026, 20:06 door Anoniem

Linus Torvalds did not issue a public "meltdown" or fiery retort, but rather focused on the technical inadequacy of the affected subsystem and advocated for removing the problematic code entirely. Here is the breakdown of his reaction based on discussions: Blamed the AF_ALG Subsystem: Torvalds indicated that the user-space crypto API (AF_ALG)—where the flaw resides—has never been heavily used, except in exploits, and that it doesn't stand up in a modern world with AI-assisted bug discovery. Recommends Disabling Subsystem: He advised that those in charge of Linux kernel configurations should disable all CONFIG_CRYPTO_USER_API_* options to make this, and future similar bugs, unexploitable. Advocates for User-Space Migration: Torvalds suggested that any user-space programs relying on this API should be migrated to user-space cryptography code rather than relying on kernel-mode crypto functions

Beschrijf je klacht (Optioneel):

captcha