logoalt Hacker News

lokartoday at 4:46 PM2 repliesview on HN

My favorite urgent must fix CVE from compliance was a bug in the Linux PCMCIA driver on some EC2 VMs.


Replies

chrismorgantoday at 5:46 PM

I don’t say it’s the case there (it probably isn’t, you probably need hardware access or root), but sometimes those sorts of things do actually matter because there’s a way of causing them to be run anyway.

This is why it’s good to exclude things you don’t need. The less there is, the fewer places there are for problems to lurk.

show 1 reply
sriram_suntoday at 5:36 PM

Why is that even part of the image?

show 1 reply