59
Microsoft waited 6 months to patch actively exploited admin-to-kernel vulnerability (www.theregister.com)
submitted 2 years ago by to c/cybersecurity@infosec.pub
7 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 18 points 2 years ago (1 child)

It they've already got admin privileges, you're already fucked.

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
  • [–] 5 points 2 years ago (2 children)

    Other OSes like Linux try to maintain this security boundary, though: https://www.man7.org/linux/man-pages/man7/kernel_lockdown.7.html

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [+] 6 points 2 years ago* (1 child)
    [deleted]
  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 4 points 2 years ago (1 child)

    You might be right. I think that the Linux kernel doesn't have an ABI though, so I believe the driver has to be built for the current version of the kernel. I think the idea is also that the driver is signed by the distro, not Microsoft, so the risk of random drivers getting signed accidentally is probably much lower.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 2 years ago (2 children)

    depends, they can also loaded via dkms which may not require it

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •