Page 1 of 1

Linux root vulnerability to PwnKit

Posted: 27 Jan 2022, 23:54
by titanrx8
Will TM release a patch for this exploit?

https://www.tomshardware.com/amp/news/1 ... lity-found

Re: Linux root vulnerability to PwnKit

Posted: 28 Jan 2022, 15:51
by TMroy
pkexec has not been used in TOS.

Re: Linux root vulnerability to PwnKit

Posted: 28 Jan 2022, 23:13
by Saijin_Naib
TMroy wrote: 28 Jan 2022, 15:51 pkexec has not been used in TOS.
Good to know, and matches what I found locally when looking at the filesystem images.

Thanks for the prompt reply.

This would be a good time to make a news post stating what recent CVEs/vulns we are not vulnerable to (pkexec, log4j) to help folks out.

We also appreciate and need more posts highlighting what we are vulnerable to, and how to mitigate those vulnerabilities.