Hi all, do you know about any progress in fixing the recent kernel local privilege escalation bugs?
Thanks!
-Yenya
Hi Yenya,
Yes, AlmaLinux has already published a call for testing for both Januscape and Bad Epoll:
According to the blog post, patched kernels are currently available in the testing repository.
Patched versions listed there are:
AlmaLinux 8:
kernel-4.18.0-553.139.4.el8_10
AlmaLinux 9:
kernel-5.14.0-687.20.3.el9_8
AlmaLinux 10:
kernel-6.12.0-211.30.3.el10_2
Januscape affects AlmaLinux 8, 9, and 10.
Bad Epoll affects AlmaLinux 9 and 10.
I also did a quick boot test with the testing kernels on KVM guests for AlmaLinux 8, 9, 10, and 10 x86_64_v2. All booted successfully, and I did not see any panic or oops in my environment.
If you can test them in a non-production environment, feedback would probably help the AlmaLinux team move them toward production repositories.
OK, I have checked the blog beforw writing the above post, but it took too long to write, sorry for the noise. I am testing the A9 kernel right now.
That said, I ran into a minor issue while following steps outlined in the blog post. It suggests to do
yum install almalinux-testing-release
and then
yum install --enablerepo=almalinux-testing ...
which suggests that the testing repo is disabled by default. Which is not the case. So I installed a bunch of testing packages on my system by mistake. Oh well.
Thanks!
-Yenya