

My personal suggestion would be to add initcall_blacklist=algif_aead_init to your kernel arguments. Ebpf is cool, but not a very trivial solution.
I understand the suggestion might apply to a random, unspecified distro but I disapprove of both the exploit authors and the general Internet suggesting fixes that don’t apply to every distro (including copy.fail’s AI slop RHEL distro that doesn’t exist) without caveating it.
The kernel module blacklist won’t work for every situation, if you’re not being specific in telling people where it applies, it’s best to suggest a solution that actually works regardless of distro or explain how to validate when it applies but nobody is doing that.




It has nothing to do with AI, I see it as highlighting the irony in the “pull yourself up by the bootstraps”/grind set mentality. They’re stuck in a situation where their options and capabilities are limited, and rather than suggesting something realistic or achievable they’re being recommended things that are impossible to do while stranded at sea.
You could possibly make some “let them eat cake” type allegory as well.