Hacker News Reader

> The post gives no details about what this vulnerability is

It is a very famous vulnerability that has been all over tech news sites. Sometimes it is ok to assume the audience has the slightest bit of background knowledge about the topic at hand.

View on HN

If it is really so famous and obvious then why has Ubuntu marked it not critical?

hence the headline of the post.

Neither the headline nor the writeup itself explains it. The fact that there are 500+ comments on this post and not a single one has explained why exactly this CVE needs to be fixed with urgency tells me that Ubuntu's decision is likely the correct one.

The explanation is everywhere: it can lead to RCE , researchers achieved it with mptcp but nothing prevents attackers finding another mechanism. Yes, it is hard to exploit it outside mptcp but nobody has demonstrated it is impossible, so we should be cautious and tag it as urgent

Congratulations. You solved it. You figured out why the article exists.

Here's 1000 picarats.

Reply on news.ycombinator.com