dirtypatch

For machines that cannot be rebooted, this program can be used to check and mitigate the vulnerabilities.

Usage

go build -o dirtypatch cmd/main.go
# since this is a patch, not a exploit, root permission is required
sudo ./dirtypatch

It checks the vulnerabilities and try to mitigate them.

copyfail:
- LKM: it disables the module algif_aead and clears the page cache.
- builtin: it uses systemtap to patch the kernel.
dirtyfrag:
- it disables the modules esp4, esp6, rxrpc and clears the page cache.
- builtin not supported yet

See LICENSE for details.

Name		Name	Last commit message	Last commit date
Latest commit History 4 Commits
cmd		cmd
LICENSE		LICENSE
Readme.md		Readme.md
copyfail.go		copyfail.go
dirtyfrag.go		dirtyfrag.go
dirtyfrag_test.go		dirtyfrag_test.go
exlpoit.go		exlpoit.go
go.mod		go.mod
go.sum		go.sum