Re: CVE-2021-4034: why is pkexec still a thing?
Demi Marie Obenour wrote on Fri, Jan 28, 2022 at 10:55:43AM -0500:
As an aside, can Linux and/or glibc please disallow passing a NULL
argv[0]? I would honestly be okay with glibc just crashing the process
during startup if argv[0] is NULL or empty.
FWIW a patch has already been sent shortly after this all started:
https://lore.kernel.org/lkml/20220127000724.15106-1-ariadne@dereferenced....
And it's already in the mmotm tree so just a matter of time until it
reaches linux master
--
Dominique