The Linux disaster that almost was
Add Axios as your preferred source to
see more of our stories on Google.
A new set of critical security flaws in Linux operating systems may not be as critical as previously believed.
Why it matters: The new bugs, when taken together, could give an attacker the ability to remotely execute commands on vulnerable Linux systems.
- Linux is a popular open-source operating system used by everyone from software developers to major corporations.
State of play: Researcher Simone Margaritelli discovered a chain of flaws in Linux last week that could allow hackers to install a new printer and execute code whenever they successfully "print" something from the new device.
- At least one of those flaws was given a 9.9 out of 10 severity score.
- Several cybersecurity firms, including Censys and Aqua Security, have written their own analyses of the bugs.
Threat level: Some experts have called into question the rationale for such a high severity score.
- Not all Linux systems are vulnerable to the flaws.
- And an attack would require hackers to bypass a firewall, which would alert the organization and block any new remote connections like these.
Yes, but: These conditions haven't stopped hackers from scanning the internet for vulnerable devices to target, Risky Business reported yesterday.
- At least 75,000 systems are running the affected Linux printing system, according to the report.
The bottom line: Fixes are already available to solve the new set of flaws, and network administrators are advised to update any affected systems as soon as possible.
