@blindcoder Yes, it needs local user access. But that could also be tunnelled through an exploitable Wordpress install or other PHP etc stuff. SELinux might already help in that case, but my general rule would be: If the machine is exposed to the internet, deploy the mitigation. For machines that are not open to the internet, like homelabs etc it is an acceptable risk to wait for the updated kernel packages.
