VyOS image build scripts (mirror of https://github.com/vyos/vyos-build.git) https://git.amelek.net/vyos/vyos-build.git/atom?h=sever-sever-patch-1 2026-07-19T07:21:17+00:00 2026-07-19T07:21:17+00:00 Christian Breunig christian@breunig.cc 2026-07-18T19:32:28+00:00 urn:sha1:a0a7452d44dd5cfe3c96ae5f81fa6c470e93003a Building linux-perf-* on a native arm64 build host failed with "No rule to make target '.../unistd_64.h'" because arch/arm64/kernel/Makefile.syscalls overrides syscalltbl with a path relative to the kernel root, but tools/lib/perf/Makefile invokes the header generator from tools/lib/perf/ instead. Make the override absolute, matching the srctree-prefixed default. 2026-07-08T18:38:55+00:00 Christian Breunig christian@breunig.cc 2026-07-08T18:38:55+00:00 urn:sha1:9ab08c84d113aec00c5114721d87cdcda46f187d 2026-06-26T15:23:32+00:00 Viacheslav Hletenko v.gletenko@vyos.io 2026-06-26T15:23:32+00:00 urn:sha1:b3edf28db488a6d6af61e2c54c6ea9ae7a0f7053 Kernel: T8914: add support for 2.5G pluggables on BCM57810S 2026-06-26T12:24:51+00:00 Daniil Baturin daniil@vyos.io 2026-06-26T12:24:51+00:00 urn:sha1:b284c29baa5ad43d9de885b26383821f2f8b3da8 Kernel: T8605: net/l2tp: allow unmanaged tunnel setup without route to peer 2026-06-25T18:21:30+00:00 Christian Breunig christian@breunig.cc 2026-06-25T15:21:05+00:00 urn:sha1:33efe03323b20540e3ce7262af0c5f4d042efd57 Add the well-known JAMESMTL kernel module patch for bnx2x to advertise 2.5Gbit/s capabilities on Broadcom NetXtreme2-X cards with BCM57810S chipset. This is useful for ISP GPON access networks that use 2.5Gbit/s pluggables and need the NIC to negotiate beyond 1000baseT/Full, avoiding the 940Mbit/s practical cap on overprovisioned 1G services. References: * https://hack-gpon.org/broadcom-57810s/ * https://github.com/JAMESMTL/snippets/blob/dceb2fee74d80c66d/bnx2x/patches/bnx2x_warpcore_8727_2_5g_sgmii_txfault.patch 2026-06-25T15:14:49+00:00 Christian Breunig christian@breunig.cc 2026-06-25T15:14:49+00:00 urn:sha1:c6479a4be4351e8b2f07bfc40b73134d2ad16509 2026-05-23T17:54:51+00:00 Christian Breunig christian@breunig.cc 2026-05-23T17:54:51+00:00 urn:sha1:dc194b8f6275f55d812e316dcb55cd8f57056cf1 The Kernel 6.18.33 now has an upstream fix for the fragnesia vulnerability 2026-05-15T20:05:43+00:00 Christian Breunig christian@breunig.cc 2026-05-15T20:05:43+00:00 urn:sha1:2d8bf69fb933b11ffc543121f9b0a9b461b6dc1e This fixes the LPE https://github.com/0xdeadbeefnetwork/ssh-keysign-pwn 2026-05-15T10:41:06+00:00 Daniil Baturin daniil@baturin.org 2026-05-15T10:41:06+00:00 urn:sha1:396f782580761804cbdcaf2589dbf378b55edfde that allows unprivileged users to read files owned by any other user 2026-05-14T11:39:02+00:00 Christian Breunig christian@breunig.cc 2026-05-14T11:34:49+00:00 urn:sha1:d2d23bb8cafb209fc4459adaf43748e304b84392 Fragnesia is a universal Linux local privilege escalation exploit, discovered with V12 by William Bowling with the V12 team. Fragnesia is a member of the Dirty Frag vulnerability class. This is a separate bug in the ESP/XFRM from dirtyfrag which has received its own patch. However, it is in the same surface and the mitigation is the same as for dirtyfrag. It abuses a logic bug in the Linux XFRM ESP-in-TCP subsystem to achieve arbitrary byte writes into the kernel page cache of read-only files, without requiring any race condition. The technique extends the page-cache write bug class that includes Dirty Pipe: when a TCP socket transitions to espintcp ULP mode after data has already been spliced from a file into the receive queue, the kernel processes the queued file pages as ESP ciphertext. The AES-GCM keystream byte at counter block position 2, byte 0 is XORed directly into the cached file page. By selecting the IV nonce to produce a desired keystream byte, any target byte in the file can be set to any value — one byte per trigger invocation. From: https://github.com/v12-security/pocs/blob/532994fc003a7/fragnesia/README.md