sid/synix
1
0
Fork 0
Code Issues 6 Pull requests 1 Projects Activity Actions

Compare commits

base: sid:a43fa6440bf73ad84bf8573ff468e3a3ab3b1e75
Branches Tags
sid:release-25.11
sid:develop
sid:feature/librechat-oci
sid:feature/zfs
...
compare: sid:b9736a5f50fa8f4584c1b317bcdcdccf97cd844a
Branches Tags
sid:release-25.11
sid:develop
sid:feature/librechat-oci
sid:feature/zfs

2 commits
a43fa6440b ... b9736a5f50

Author SHA1 Message Date
sid
b9736a5f50 Merge pull request 'fix CVE-2026-43500' (#38) from develop into release-25.11
All checks were successful
Deploy docs / build-and-deploy (push) Successful in 5s
Details 
Reviewed-on: #38
 2026-05-09 09:02:10 +02:00
sid
997c4a98dc fix CVE-2026-43500
All checks were successful
Flake check / flake-check (pull_request) Successful in 23s
Details
Build tests / build-hosts (pull_request) Successful in 29s
Details
2026-05-09 08:39:38 +02:00
1 changed files with 12 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

12
modules/nixos/common/boot.nix
View file

@ -5,4 +5,16 @@
boot.kernelPackages = lib.mkIf (lib.versionOlder pkgs.linux.version "6.18.22") (
lib.mkDefault pkgs.linuxPackages_6_18
);
# fix CVE-2026-43500
boot.extraModprobeConfig = ''
install esp4 ${pkgs.coreutils}/bin/false
install esp6 ${pkgs.coreutils}/bin/false
install rxrpc ${pkgs.coreutils}/bin/false
'';
boot.blacklistedKernelModules = [
"esp4"
"esp6"
"rxrpc"
];
}