---
title: "Recent Kernel exploits, attack surface reduction, example IPSEC"
url: https://daily.dev/posts/recent-kernel-exploits-attack-surface-reduction-example-ipsec-0wn4vcxsw
source_url: https://www.openwall.com/lists/oss-security/2026/05/16/3
type: article
source: "Lobsters"
published: 2026-05-17T12:13:33.244Z
updated: 2026-05-17T12:13:56.169Z
tags: ["linux"]
reading_time: 2
upvotes: 0
comments: 0
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Recent Kernel exploits, attack surface reduction, example IPSEC

**[Lobsters](https://daily.dev/sources/lobsters)** · 2 min read · 0 upvotes · 0 comments

## Summary

Security researcher Hanno Böck raises concerns about Linux kernel attack surface, using recent ESP/IPSEC-related local root exploits as a case study. He argues that Linux distributions ship and auto-load most kernel modules by default, exposing users to vulnerabilities in features they never use. He suggests splitting rarely-used modules like IPSEC into separate optional packages (e.g., linux-modules-ipsec) that aren't installed by default, noting this would have significantly reduced the impact of several recent kernel exploits. He also provides specific kernel config options to disable for those building custom kernels who don't use IPSEC.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://www.openwall.com/lists/oss-security/2026/05/16/3>

## Similar posts on daily.dev

- [Fragnesia Linux kernel local privilege escalation vulnerability mitigations](https://daily.dev/posts/fragnesia-linux-kernel-local-privilege-escalation-vulnerability-mitigations-ewyawshyk) · Ubuntu · 0 upvotes · 0 comments

---

Tags: [#linux](https://daily.dev/tags/linux)

[View this post on daily.dev](https://daily.dev/posts/recent-kernel-exploits-attack-surface-reduction-example-ipsec-0wn4vcxsw)