4 ms·
In the context of the kernel, it’s hard to say when that’s true. It’s very easy to fix some bug that resulted in a kernel crash without considering that it coul
by Skunkleton 9mo ago
In the context of the kernel, it’s hard to say when that’s true. It’s very easy to fix some bug that resulted in a kernel crash without considering that it could possibly be part of some complex exploit chain. Basically any bug could be considered a security bug.
- SSLy 9mo agoplainly, crash = DoS = security issue = CVE. QED.
- deleted 9mo ago[deleted]
- michaelt 9mo agoBRB, raising a CVE complaining the OOM killer exists.
- pamcake 9mo agoMemory leaks are usually (accurately) treated as DoS. OoM killer is a mitigation to contain them and not DoS the entire OS.
- worthless-trash 9mo agoI could be wrong. But operation by design isn't considered a bug.
- samus 9mo agoIt is if some other condition is violated that is more important. Then the design might have to be reconsidered.
- suspended_state 9mo agoIf it is faulty, then it's not a bug, it's a flaw.
- lfllfkddl 9mo agoIt is possible to design a security vulnerability.
- worthless-trash 9mo agoOh, now that is an exciting area.
- SSLy 9mo agoyou either get OOMed or next malloc fails and that's also going to wreck havoc