You would be surprised. A lot of cheap consumer routers are have two or four ARM cores. The bigger issue is that they are typically running a kernel from the stone age (< 6.0.0). Sometimes a still-supported LTS kernel like 5.10 or 5.15, but then they stopped at an old patch level.
replyHeck, apparently even the new Unifi UCG Fiber is running 5.4.213 (September 2022), but maybe they backport some fixes?
[1] https://community.ui.com/releases/dd0283dc-bf71-4140-ae1d-c1...
Note that even the latest OpenWRT is vulnerable to this, I'm running OpenWRT 25.12.6 and the kernel version is 6.12.112
replyIIUC it doesn't have any listening sockets open on WAN by default at least?
replyI do see sockets listening on all interfaces, but those are blocked by the firewall.
reply root@OpenWrt2:~# ss -Qlnt4 'src 0.0.0.0'
State Local Address:Port Peer Address:Port
LISTEN 0.0.0.0:443 0.0.0.0:*
LISTEN 0.0.0.0:80 0.0.0.0:*
LISTEN 0.0.0.0:22 0.0.0.0:*They'd also need to MPTCP right?
replyI’m in the market for a new router. Got a unifi u7 pro for wifi already, what are the options for routers? Sounds like the only safe thing is to roll your own so you can update things on time.
replyIf you wants something with a nice web interface, probably OpenWrt [1] or OPNsense?
reply[1] Yes, it seems that they are still on 6.12.112, but they'll probably roll out an update quickly. Also see: https://forum.openwrt.org/t/cve-2026-98432-kernel-update-or-...
If you have a separate WiFi AP running your own router on your *nix of choice is quite achievable. I use NixOS since I use it everywhere else, if I didn't I'd probably go with OpenBSD.
replyMy $50 router has two cores.
reply root@OpenWrt2:~# lscpu
Architecture: mips
Byte Order: Little Endian
CPU(s): 4
On-line CPU(s) list: 0-3
Model name: -
Model: MIPS 1004Kc V2.15
Thread(s) per core: 2
Core(s) per socket: 2
Socket(s): 1Those routers probably have 20 other critical un-patched exploits ...
replyAn entire ecosystem of malware crawling and cohabiting in them.
deleted
reply