v0.0.4

v0.0.4

Bug fixes

• 6.20+ kernels misclassified as unknown — kernels between the last
  vulnerable arc and 7.0.0 (e.g. 6.20.x) were wrongly returned as
  UNKNOWN_BRANCH. They are now classified as patched on the assumption
  the upstream fix carried forward. ([kernel.py])

• False mitigated verdict when modprobe --showconfig reports no
  blacklist — after a successful modprobe --showconfig run that found no
  install algif_aead /bin/false directive, the tool was falling through to
  a manual .conf directory scan. A stale file in a directory modprobe
  ignores could flip the verdict to mitigated incorrectly. The showconfig
  result is now trusted when it succeeds. ([modules.py])

• fix reported failure when rmmod couldn't unload the module — the
  module may be in use and refuse to unload; that is expected. The persistent
  mitigation is the modprobe rule, not the unload. rmmod failure now
  produces a warning-level action record and a note, but no longer flips
  overall fix success. ([fixer.py])

What this tool does not do

fix writes a modprobe rule and attempts to unload the module. It does not
call your package manager. Permanent remediation requires upgrading the kernel
through your distribution's normal update mechanism.