タグ

2026年5月8日のブックマーク (1件)

  • GitHub - V4bel/dirtyfrag

    This document describes the Dirty Frag vulnerability class, first discovered and reported by Hyunwoo Kim (@v4bel), which can obtain root privileges on major Linux distributions by chaining the xfrm-ESP Page-Cache Write vulnerability and the RxRPC Page-Cache Write vulnerability. Dirty Frag is a case that extends the bug class to which Dirty Pipe and Copy Fail belong. Because it is a deterministic l

    GitHub - V4bel/dirtyfrag
    murashit
    murashit 2026/05/08
    ディストロまで降りてくる前に上流のパッチの解析から周知されちゃった感じなんかな。今後増えそうだなあ