Attackers exploit 'PinTheft' RDS flaw in Arch Linux to gain root

The article discusses a newly discovered Linux local privilege escalation vulnerability called 'PinTheft', targeting the RDS (Reliable Datagram Sockets) subsystem specifically in Arch Linux. The exploit allows attackers to gradually steal memory references due to handling flaws in zerocopy send operations, potentially leading to root access. A patch is available, and Arch Linux users are urged to update immediately.

For those unable to update immediately, a temporary mitigation is suggested: unloading the RDS modules to block the exploit without rebooting. The situation highlights a growing concern with multiple Linux vulnerabilities being actively exploited.