# Does this Linux vulnerability put Discourse at risk?

**URL:** https://meta.discourse.org/t/does-this-linux-vulnerability-put-discourse-at-risk/216154
**Category:** Support
**Created:** [January 27, 2022, 1:50am UTC](https://meta.discourse.org/t/does-this-linux-vulnerability-put-discourse-at-risk/216154 "2022-01-27T01:50:20Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![Decorbuz](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/decorbuz/32/235124_2.png) [@Decorbuz](https://meta.discourse.org/u/Decorbuz)
#### Post date: [January 27, 2022, 1:50am UTC](https://meta.discourse.org/t/does-this-linux-vulnerability-put-discourse-at-risk/216154/1 "2022-01-27T01:50:20Z")

</div>

I just wanted to make sure that I don’t have to worry about my Discourse instance right now due to this recently discovered vulnerability in Linux (from twelve years ago! 🤯).

> **[A bug lurking for 12 years gives attackers root on most major Linux distros](https://arstechnica.com/information-technology/2022/01/a-bug-lurking-for-12-years-gives-attackers-root-on-every-major-linux-distro/)**
>
> It's likely only a matter of time before PwnKit is exploited in the wild.

---

<div class="post-metadata">

### Author: ![Falco](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/falco/32/179432_2.png) [@Falco](https://meta.discourse.org/u/Falco)
#### Post date: [January 27, 2022, 2:08am UTC](https://meta.discourse.org/t/does-this-linux-vulnerability-put-discourse-at-risk/216154/2 "2022-01-27T02:08:49Z")

</div>

It’s a privilege escalation bug, so you need an existing local user to be able to exploit it. Or pair it with another RCE bug.

That said you should update your server packages ASAP, and we will also release a newer container image this week.

---

<div class="post-metadata">

### Author: ![Decorbuz](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/decorbuz/32/235124_2.png) [@Decorbuz](https://meta.discourse.org/u/Decorbuz)
#### Post date: [February 1, 2022, 4:48pm UTC](https://meta.discourse.org/t/does-this-linux-vulnerability-put-discourse-at-risk/216154/3 "2022-02-01T16:48:09Z")

</div>

> [@Falco](#):
>
> That said you should update your server packages ASAP, and we will also release a newer container image this week.

Okay, good to know. Thanks for telling me!

---

<div class="post-metadata">

### Author: ![system](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/system/32/443519_2.png) [@system](https://meta.discourse.org/u/system)
#### Post date: [March 3, 2022, 4:48pm UTC](https://meta.discourse.org/t/does-this-linux-vulnerability-put-discourse-at-risk/216154/4 "2022-03-03T16:48:29Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.