lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Wed, 23 Nov 2022 15:20:36 +0100 From: Johannes Berg <johannes@...solutions.net> To: Greg Kroah-Hartman <gregkh@...uxfoundation.org>, linux-kernel@...r.kernel.org Cc: "David S. Miller" <davem@...emloft.net>, Eric Dumazet <edumazet@...gle.com>, Jakub Kicinski <kuba@...nel.org>, Paolo Abeni <pabeni@...hat.com>, Kalle Valo <kvalo@...nel.org>, Oleksij Rempel <linux@...pel-privat.de>, Maciej Żenczykowski <maze@...gle.com>, Neil Armstrong <neil.armstrong@...aro.org>, Mauro Carvalho Chehab <mchehab@...nel.org>, Andrzej Pietrasiewicz <andrzejtp2010@...il.com>, Jacopo Mondi <jacopo@...ndi.org>, Łukasz Stelmach <l.stelmach@...sung.com>, Laurent Pinchart <laurent.pinchart@...asonboard.com>, linux-usb@...r.kernel.org, netdev@...r.kernel.org, linux-wireless@...r.kernel.org, Ilja Van Sprundel <ivansprundel@...ctive.com>, Joseph Tartaro <joseph.tartaro@...ctive.com> Subject: Re: [PATCH] USB: disable all RNDIS protocol drivers On Wed, 2022-11-23 at 13:46 +0100, Greg Kroah-Hartman wrote: > The Microsoft RNDIS protocol is, as designed, insecure and vulnerable on > any system that uses it with untrusted hosts or devices. Because the > protocol is impossible to make secure, just disable all rndis drivers to > prevent anyone from using them again. > Not that I mind disabling these, but is there any more detail available on this pretty broad claim? :) johannes
Powered by blists - more mailing lists