15 matches found
dirtyfrag
Dirty Frag Overview Dirty Frag is a class of Linux ke...
Dirty Frag: Using the Page Caches as an Attack Surface
Dirty Frag is a Linux local privilege escalation LPE chain published on May 7, 2026. It combines two previously unknown kernel vulnerabilities can allow an unprivileged local user to escalate to root on many major Linux distributions. xfrm-ESP Page-Cache Write CVE-2026-43284 RxRPC Page-Cache Writ...
Exploit for Write-what-where Condition in Linux Linux_Kernel
Dirty Frag Technical Analysis CVE-2026-43284 xfrm-ESP / C...
Linux Kernel Dirty Frag LPE Exploit Enables Root Access Across Major Distributions
Details have emerged about a new, unpatched local privilege escalation LPE vulnerability impacting the Linux kernel. Dubbed Dirty Frag , it has been described as a successor to Copy Fail CVE-2026-31431, CVSS score: 7.8, a recently disclosed LPE flaw impacting the Linux kernel that has since come...
dirtyfrag
Dirty Frag: Universal Linux LPE Abstract !tuxasse...
Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel
CVE-2026-31431 — Copy Fail Local Privilege Escalation i...
Copy Fail AF_ALG + authencesn Page-Cache Write
CVE-2026-31431 is a logic flaw in the Linux kernel's authencesn AEAD template that, when reached via the AFALG socket interface combined with splice, allows an unprivileged local user to perform a controlled 4-byte write into the page cache of any readable file. Because the corrupted pages are...
Exploit for CVE-2026-31431
Copy Fail - CVE-2026-31431 This repository provides a Go port...
Exploit for CVE-2026-31431
CVE-2026-31431 Linux algifaead page-cache write to root - Lo...
Exploit for CVE-2026-31431
Copy Fail CVE-2026-31431 - Comprehensive Writeup 1. Vuln...
Exploit for CVE-2026-31431
CVE-2026-31431 "Copy Fail" — Universal LPE Exploit Linux...
Exploit for CVE-2026-31431
CVE-2026-31431 — "Copy Fail" Research Repository !Severity:...
Exploit for CVE-2026-31431
CVE-2026-31431 "Copy Fail" — Detection & Response Package P...
CVE-2023-53081 ocfs2: fix data corruption after failed write
In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix data corruption after failed write When buffered write fails to copy data into underlying page cache page, ocfs2writeendnolock just zeroes out and dirties the page. This can leave dirty page beyond EOF and if page...
kernel: improper initialization of the "flags" member of the new pipe_buffer
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copypagetoiterpipe and pushpipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cach...