Moxie Marlinspike (@moxie)
Let this Linux kernel CVE related to IPv4 (unused!) options be a reminder to us all: we didn't have to do this IPv6 thing. The IPv4 header has unused options fields that were already variable length to 40 bytes! We could have just cannibalized a few of those bits way back in 1995, had plenty of address space to work with this whole time, and as a bonus not had this remotely exploitable vulnerability in the Linux TCP stack. ubuntu.com/security/CVE-2026…
View on X