Hacker News

>the kernel handed those saved options from the request socket to the new connection without copying them, then freed them immediately when the connection went away, while another CPU could still be reading them to build a handshake reply.

If this requires a multi-core system to exploit, it's good news for most of the consumer routers that will never get updates. Saved by cheap single-core hardware.

microtonal 15 hours ago [ - ]

You would be surprised. A lot of cheap consumer routers are have two or four ARM cores. The bigger issue is that they are typically running a kernel from the stone age (< 6.0.0). Sometimes a still-supported LTS kernel like 5.10 or 5.15, but then they stopped at an old patch level.

Heck, apparently even the new Unifi UCG Fiber is running 5.4.213 (September 2022), but maybe they backport some fixes?

[1] https://community.ui.com/releases/dd0283dc-bf71-4140-ae1d-c1...

FredFS456 13 hours ago [ - ]

Note that even the latest OpenWRT is vulnerable to this, I'm running OpenWRT 25.12.6 and the kernel version is 6.12.112

snek_case 11 hours ago [ - ]

IIUC it doesn't have any listening sockets open on WAN by default at least?

khrbtxyz 9 hours ago [ - ]

I do see sockets listening on all interfaces, but those are blocked by the firewall.

  root@OpenWrt2:~# ss -Qlnt4 'src 0.0.0.0'
  State  Local Address:Port Peer Address:Port
  LISTEN       0.0.0.0:443       0.0.0.0:*   
  LISTEN       0.0.0.0:80        0.0.0.0:*   
  LISTEN       0.0.0.0:22        0.0.0.0:*

bpye 6 hours ago [ - ]

They'd also need to MPTCP right?

Gigachad 10 hours ago [ - ]

I’m in the market for a new router. Got a unifi u7 pro for wifi already, what are the options for routers? Sounds like the only safe thing is to roll your own so you can update things on time.

microtonal 4 hours ago [ - ]

If you wants something with a nice web interface, probably OpenWrt [1] or OPNsense?

[1] Yes, it seems that they are still on 6.12.112, but they'll probably roll out an update quickly. Also see: https://forum.openwrt.org/t/cve-2026-98432-kernel-update-or-...

bpye 6 hours ago [ - ]

If you have a separate WiFi AP running your own router on your *nix of choice is quite achievable. I use NixOS since I use it everywhere else, if I didn't I'd probably go with OpenBSD.

khrbtxyz 9 hours ago [ - ]

My $50 router has two cores.

  root@OpenWrt2:~# lscpu
  Architecture:        mips
  Byte Order:          Little Endian
  CPU(s):              4
  On-line CPU(s) list: 0-3
  Model name:          -
  Model:               MIPS 1004Kc V2.15
  Thread(s) per core:  2
  Core(s) per socket:  2
  Socket(s):           1

dist-epoch 15 hours ago [ - ]

Those routers probably have 20 other critical un-patched exploits ...

An entire ecosystem of malware crawling and cohabiting in them.

10 hours ago [ - ]

[deleted]