I don't want to run a mitigation that doesn't need to be run. Just in case that introduces a problem in a system that is currently working fine and not exploitable.
So from what I've learned so far:
```
lsmod | grep algif_aead
```
this checks to see if the exploitable module is loaded.
You can check if the module is present in the system, but not currently loaded with:
```
modinfo algif_aead 2>/dev/null
```
If that returns information, the module is present and could be loaded.
But you have to have root privileges to load the module.
So my logic is that if
```
lsmod | grep algif_aead
```
returns nothing, the vulnerable Linux kernel module is not loaded and therefore not exploitable... even if the module is present on the system but not loaded.
Please correct me if I am wrong.
#CopyFail #Linux
