this post was submitted on 30 Apr 2026
333 points (98.0% liked)

Selfhosted

60093 readers
1180 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam.

  3. Posts here are to be centered around self-hosting. Please ensure it is clear in your post how it relates to self-hosting.

  4. Don't duplicate the full text of your blog or git here. Just post the link for folks to click.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require your active participation in selfhosting or related communities, or the post will be removed. No more than 10% of your posts or comments may be self-promotional, or your post will be removed. F/LOSS Exception: If your post is about a project that is completely open source & can be self-hosted in full without payment, and your account is at least 7 days old, your post is exempt from this rule as long as you continue to engage in comments.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] BlackLaZoR@lemmy.world 6 points 1 month ago* (last edited 1 month ago) (3 children)

Nothing much to do for me. Just apply patches as normal.

Edit: I wonder how bad is it on Android

[–] Hobo@lemmy.world 3 points 1 month ago

I don't think af_alg is exposed to non-root users on android.

[–] GamingChairModel@lemmy.world 2 points 1 month ago (1 children)

Android doesn't have su, which this proof of concept exploit requires. Although rooted Android does, so in theory malware written for rooted Android could escalate to root privileges.

Also, the underlying vulnerabilities might be exploitable without su but I don't fully understand the AF_ALG and authencesn bug limits things, or what other executables can escalate privileges.

[–] wewbull@feddit.uk 2 points 1 month ago (1 children)

Don't need specifically SU by my understanding. Just any suid executable.

[–] GamingChairModel@lemmy.world 2 points 1 month ago

Ah yeah. Plus apparently Android's default SELinux configuration blocks this separately, as well.

[–] mexicancartel@lemmy.dbzer0.com 0 points 1 month ago

I wished android is affected but no