New dirty frag exploit grants root access on linux systems

Filipino

A security researcher has disclosed Dirty Frag, a new Linux kernel exploit that allows local users to gain root privileges. The flaw affects major distributions and remains unpatched on most systems despite earlier fixes for a similar issue.

Hyunwoo Kim, also known as v4bel, reported the threat after submitting details to the linux-distros mailing list under a five-day embargo. An unnamed party released a working exploit the same day, leaving most distributions exposed. Dirty Frag combines two flaws, CVE-2026-43284 and CVE-2026-43500, to modify files in memory without altering them on disk.

Mga Kaugnay na Artikulo

Illustration depicting the Linux CopyFail vulnerability enabling root access exploits alongside Ubuntu's DDoS-induced outage.
Larawang ginawa ng AI

Linux CopyFail exploit threatens root access amid Ubuntu outage

Iniulat ng AI Larawang ginawa ng AI

A critical Linux vulnerability known as CopyFail, tracked as CVE-2026-31431, allows attackers to gain root access on systems running kernels since 2017. Publicly released exploit code has heightened risks for data centers and personal devices. Ubuntu's infrastructure has been offline for over a day due to a DDoS attack, hampering security communications.

US government issues urgent CopyFail warning as Linux patches roll out

Four days after the CopyFail (CVE-2026-31431) exploit disclosure disrupted Ubuntu services, the US government warned of its critical risks to Linux systems, urging immediate patching amid public exploit code.

Red Hat directs users to security page for CopyFail vulnerability

Iniulat ng AI

Red Hat has provided an official link to information on the CopyFail vulnerability, known as CVE-2026-31431. The security page details a fix for the local privilege escalation issue and specifies affected versions. This follows a user inquiry urging faster publication of a patch.

Teknolohiya

OpenClaw patches severe vulnerability granting admin access

Linux

Greg Kroah-Hartman runs AI-assisted fuzzing on Linux kernel

Linux

Developer releases VRAM fix for AMD GPUs on Linux

New Linux botnet SSHStalker uses IRC for command-and-control

Researchers have identified a new Linux botnet called SSHStalker that relies on the outdated IRC protocol for its command-and-control operations. The botnet spreads through SSH scanning and brute-forcing, targeting cloud infrastructure. It incorporates old vulnerabilities and persistence mechanisms for broad infection.

Microsoft patches critical ASP.NET Core vulnerability on macOS and Linux

Iniulat ng AI

Microsoft has released an emergency patch for a high-severity vulnerability in its ASP.NET Core framework, affecting macOS and Linux applications. Tracked as CVE-2026-40372, the flaw allows unauthenticated attackers to gain SYSTEM privileges through forged authentication payloads. The company advises immediate updates and key rotation to fully mitigate risks.

March 06, 2026 04:23

Linux rootkits advance with eBPF and io_uring techniques

February 19, 2026 13:36

Researchers uncover new SysUpdate malware variant targeting Linux

February 18, 2026 23:37

New SysUpdate malware variant targets Linux systems

February 18, 2026 11:16

Dell zero-day flaw unpatched for nearly two years

February 11, 2026 00:43

Researchers discover SSHStalker botnet infecting Linux servers

Gumagamit ng cookies ang website na ito

Gumagamit kami ng cookies para sa analytics upang mapabuti ang aming site. Basahin ang aming patakaran sa privacy para sa higit pang impormasyon.
Tanggihan