In May 2019, CVE-2019-11815 was reported, which is a vulnerability in the RDS (Reliable Datagram Sockets) kernel module.

Yesterday (23rd July 2019), a kernel patch for the vulnerability was released under USN-4068.

RDS is blacklisted by default in Ubuntu, under the rare-network modprobe blacklist config file.

However, what can cause RDS to be enabled? Could installing a package from the Apt repositories cause this? Is there a list of packages that can cause it to be enabled? Or would the blacklist always have to be manually removed?

I can see that RDS is definitely not loaded using lsmod, however I would like to determine whether it could have been loaded in the past, or if there is potential for it to be loaded in the future because of a package or system configuration.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.