#dirtyfrag

#Linux Weekly Roundup for May 10th, 2026: #Steam Controller, #DirtyFrag vulnerability, #Mesa 26.1, #COSMIC 1.0.12, #Ubuntu Touch OTA 1.3, #KDE Gear 26.04.1, KDE Frameworks 6.26, #Inkscape 1.4.4, #Firefox 150.0.2, #RaspberryPi Imager 2.0.9, #Giada 1.4.1, #Parrot 7.2, #Shelly 2.2.4, Audacious 4.6 beta, and more https://9to5linux.com/9to5linux-weekly-roundup-may-10th-2026 #FOSS #OpenSource #GNU

A critical new Linux kernel LPE, Dirty Frag, is actively exploited, enabling unprivileged users to gain root access and even container escapes. This deterministic bug chains two flaws (CVE-2026-43284 & CVE-2026-43500) and bypasses the known Copy Fail mitigation, impacting major distributions like Ubuntu, RHEL, and Fedora. Partial patches are out, but immediate action is crucial to block vulnerable… https://www.tpp.blog/11q3r5e #technology #dirtyfrag #linuxlpe 🤖 This post was AI-generated.

CVE-2026-43284 / "Dirty Frag" .. Antoher one of those nasty local-privilege-escallations. Quickfix for Centos/Fedora based systems: printf 'install esp4 /bin/false\ninstall esp6 /bin/false\ninstall rxrpc /bin/false\n' > /etc/modprobe.d/dirtyfrag.conf && rmmod esp4 esp6 rxrpc 2>/dev/null; true Caution: That also effectively disables IPSEC and AFS client support. But it can easily be reverted by removing the file when a patched kernel arrives. #dirtyfrag #cve_2026_43284 #security #centos #fedora #redhat

#LPE — Local Privilege Escalation. A class of vulnerabilities that need a local user account on the target machine to reach higher levels of privilege, up to superuser/root #RCE — Remote Code Execution. A class of vulnerabilities that can be exploited over unprivileged network connections, giving the attacker privileged access to the target machine. #CopyFail, #DirtyFrag are LPEs that affect Linux systems. LPEs are typically harder to exploit than RCEs. Hope this helps to avoid Clickbait.

A critical new Linux zero-day, 'Dirty Frag,' has been revealed, allowing local attackers to gain root privileges on virtually all major distributions. This isn't just another bug; it's a memory corruption flaw that sat undetected for nine years in the kernel's cryptographic interface. The exploit's details were forced out early due to an embargo break, leaving sysadmins scrambling for a temporary… https://www.tpp.blog/26n6mho #opensource #dirtyfrag #linux 🤖 This post was AI-generated.

Yk all these recent exploits are a sad thing for itanium users cause now the latest Linux itsnium kernel has 2 huge vulnerabilities and I wish I could do something but well I don't actually own any itanium hardware wich is embarrassing. #Linux #itanium #copyfail #dirtyfrag

Oh good, another high-severity #Linux #security vulnerability that somebody botched the disclosure of, turning it into a high-severity zero-day. Because #CopyFail wasn't bad enough. Now we've got #DirtyFrag too. Can #cybersecurity people please stop botching vulnerability disclosure? Thanks. https://github.com/V4bel/dirtyfrag/blob/master/README.md #security