How about blacklisting algif_aead initialization function on RHEL 9/10? I added ... | Hacker News

Hacker Timesnew | past | comments | ask | show | jobs | submit

		byron3256 16 days ago \| parent \| context \| favorite \| on: Copy Fail How about blacklisting algif_aead initialization function on RHEL 9/10? I added "initcall_blacklist=algif_aead_init" to the kernel boot options and rebooted. The exploit is not working anymore.

m3nu 16 days ago [–]

Good idea. Added to the playbook for RHEL only.

On Debian normal unloading of the module works.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact