I still remember hearing about a Ring 0 exploit in Windows (I may be misremembering, though) that required Ring 0 access. I think if an attacker has access to Ring 0, you’re already screwed anyway.

I agree, all this attention grabbing sound to me as if this is actually not a big deal. But we will see i guess.

A 9.9 is pretty bad no matter what. They wouldn't rank it almost a 10 if it was some obscure bug that is very hard to exploit.

With that being said it is hard to know without details

This link should be working.

Quoting from the OP tweet:

* Unauthenticated RCE vs all GNU/Linux systems (plus others) disclosed 3 weeks ago.
* Full disclosure happening in less than 2 weeks (as agreed with devs).
* Still no CVE assigned (there should be at least 3, possibly 4, ideally 6).
* Still no working fix.
* Canonical, RedHat and others have confirmed the severity, a 9.9, check screenshot.
* Devs are still arguing about whether or not some of the issues have a security impact.

I've spent the last 3 weeks of my sabbatical working full time on this research, reporting, coordination and so on with the sole purpose of helping and pretty much only got patronized because the devs just can't accept that their code is crap - responsible disclosure: no more.

Could be quite a few different things.

Could be the kernel itself, gnupg, openSSH or even bash.

But we won't know for sure, until it's publically disclosed.

If it's only GNU Linux - and not regular Linux - then we know it's not the Linux where the issue occurs. ;-)

(Just analyzing what's said. It's probably all linuxes if it's not a glibc issue)

It says GNU/Linux but also says "and others" which could mean anything. eg doesnt specify if something like Alpine would be affected—is that "and others"?

In any case, I'll wait 2 weeks and find out.

10/10 that poor bloke from Intel who copy-pasted code without understanding it (and got an earful for it) had buffer overflow bugs in his bit of plagiarized oeuvre

I believe if the instance is still up then it will still work up until a daily limit is reached. Most of them appear to be broken because the limit is fairly low.

Yeah, what a disappointment. This guy brought shame to the security community because he was salty that his vulnerability didn't get the attention it "deserved".

We can see you totally didn't do that. Also how would you even get the update?