Fix Linux kernel vulnerabilities without rebooting.

本站添加: 2026-06-06

[00:00:00]Uh, that was slightly difficult because um the usual workaround for copy file vulnerability is to remove vulnerable module.

[00:00:11]But, since we have a lot of Talos Linux installations, Talos Linux not allowing you to do rmmod uh call from and remove actually Linux kernel modules from the running kernel.

[00:00:24]It is a fix prepared.

[00:00:27]Uh, it can be simply installed. Uh, what it does, it just uh injects small eBPF program in your system, uh which blocks vulnerable API from the kernel.