Handling Dirty Frag and Copy Fail with Puppet (opens in new tab)

Do you know which of your Linux servers are vulnerable right now? Two critical Linux kernel vulnerabilities are being actively exploited. Dirty Frag targets the IP fragment reassembly modules that almost every Linux server has loaded by default. Copy Fail targets the AF_ALG cryptographic subsystem's AEAD interface. Both can allow an attacker to gain escalated local privileges, and both have interim mitigations you can deploy right now, before the kernel patches land. The first question every ...