CVE-2020-15704

CVE-2020-15704 concerns the modprobe child process in the patch that handles loading the pppd module during startup. The patch file ./debian/patches/load_ppp_generic_if_needed improperly loads modules, enabling a local, non-root attacker to read arbitrary root files via the MODPROBE_OPTIONS envir...