It would be interesting to know what share of servers have that enabled.

I have it enabled on Debian and Ubuntu and I’m quite happy with it. But I had pretty bad experiences with reboot-less updates on other (desktop) distros.

Agreed.

You almost need an AI agent in a sandbox to download and run all the POCs to weed out the fake ones until one of them becomes well known.

Sounds like a good malware vector to target security researchers…

Yeah, assuming everyone installed the patch is quite optimistic. But censys probably also undercounts the number of fixed systems, as some Linux distros (e.g., Ubuntu) don’t change the version when shipping security fixes. I’m running the sury.org package which would report as 7.4.33 but has been patched. Still it looks like there’s tons of unpatched services.

Yes, hopefully most people had time to install the updates. And maybe the false exploit reports helped slow down malicious people too.

So it seems like it was rather easy for an IT security professional to create an exploit within 24h of the disclosure. Not sure if every script kiddy can do it, but this means that there are certainly malicious people/organizations who can.

Ultimately, it seems to me that the only real choice is to patch our (public) systems ASAP these days.