Hacker News Reader

Comment by FredFS456 | Hacker News Reader

Note that even the latest OpenWRT is vulnerable to this, I'm running OpenWRT 25.12.6 and the kernel version is 6.12.112

IIUC it doesn't have any listening sockets open on WAN by default at least?

I do see sockets listening on all interfaces, but those are blocked by the firewall.

  root@OpenWrt2:~# ss -Qlnt4 'src 0.0.0.0'
  State  Local Address:Port Peer Address:Port
  LISTEN       0.0.0.0:443       0.0.0.0:*   
  LISTEN       0.0.0.0:80        0.0.0.0:*   
  LISTEN       0.0.0.0:22        0.0.0.0:*

They'd also need to MPTCP right?

Not according to the article, which says the vulnerable path runs "during the TCP handshake, ..."

Reply on news.ycombinator.com