Hacker News Reader

Red Hat claims[1] that's not enough:

> The following nftables table drops incoming IPv4 TCP packets that contain IP options, which reduces exposure to this vulnerability but cannot fully prevent it.

I suppose locally-running malicious programs could send packets to the loopback address or one of its own IPs or something.

[1] https://access.redhat.com/security/vulnerabilities/RHSB-2026...

View on HN

eBPF programs can also bypass netfilter, as can different network namespaces (like as used by containers and some privsep/isolated software).

locally-running malicious programs

That's Game Over already.

It could be from a multi-part attack where someone combines an application-level RCE like php2shell, then sends the evil loopback packets to elevate to root.

if people decide so, certainly

Reply on news.ycombinator.com