Lucene search
+L

715 matches found

Schneier on Security
Schneier on Security
added 2026/05/12 11:6 a.m.16 views

Copy.Fail Linux Vulnerability

This is the worst Linux vulnerability in years. TL;DR copy.fail is a Linux kernel local privilege escalation, not a browser or clipboard attack. Disclosed by Theori on 29 April 2026 with a working PoC. It abuses the kernel crypto API AFALG sockets plus splice to write four bytes at a time straigh...

5.9AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2026/05/12 10:30 a.m.15 views

kernel: "Dirty Frag" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel

A flaw was found in the Linux kernel's xfrm-ESP and RxRPC subsystems. Unsafe in-place cryptographic processing of shared socket buffer fragments allows a low-privileged local attacker to corrupt page-cache contents of readable files, including sensitive system files, and gain root privileges. The...

8.8CVSS6.1AI score0.93235EPSS
SaveExploits32References6
RedHat Linux
RedHat Linux
added 2026/05/11 11:40 p.m.17 views

kernel: "Dirty Frag" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel

A flaw was found in the Linux kernel's xfrm-ESP and RxRPC subsystems. Unsafe in-place cryptographic processing of shared socket buffer fragments allows a low-privileged local attacker to corrupt page-cache contents of readable files, including sensitive system files, and gain root privileges. The...

8.8CVSS6.1AI score0.93235EPSS
SaveExploits32References6
RedHat Linux
RedHat Linux
added 2026/05/11 9:40 p.m.32 views

kernel: "Dirty Frag" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel

A flaw was found in the Linux kernel's xfrm-ESP and RxRPC subsystems. Unsafe in-place cryptographic processing of shared socket buffer fragments allows a low-privileged local attacker to corrupt page-cache contents of readable files, including sensitive system files, and gain root privileges. The...

8.8CVSS6.1AI score0.93235EPSS
SaveExploits32References6
RedHat Linux
RedHat Linux
added 2026/05/11 8:2 p.m.12 views

kernel: "Dirty Frag" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel

A flaw was found in the Linux kernel's xfrm-ESP and RxRPC subsystems. Unsafe in-place cryptographic processing of shared socket buffer fragments allows a low-privileged local attacker to corrupt page-cache contents of readable files, including sensitive system files, and gain root privileges. The...

8.8CVSS6.1AI score0.93235EPSS
SaveExploits32References6
GithubExploit
GithubExploit
added 2026/05/11 7:23 p.m.156 views

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

Обзор Copy Fail CVE-2026-31431 — это логическая уязвим...

7.8CVSS6AI score0.94545EPSS
SaveExploits234
RedhatCVE
RedhatCVE
added 2026/05/11 3:25 a.m.17 views

CVE-2026-43500

A flaw was found in the Linux kernel's RxRPC networking subsystem. When a socket buffer carrying a page-cache reference reaches the RxRPC authentication verification path, the kernel performs an in-place decryption directly on the referenced page without first isolating the buffer. A low-privileg...

7.8CVSS6.1AI score0.92855EPSS
SaveExploits21References4
GithubExploit
GithubExploit
added 2026/05/11 1:14 a.m.155 views

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

CVE-2026-31431 "Copy Fail" - Research & Pentesting Tool !Li...

7.8CVSS6.2AI score0.94545EPSS
SaveExploits234
GithubExploit
GithubExploit
added 2026/05/09 7:43 p.m.212 views

Exploit for Write-what-where Condition in Linux Linux_Kernel

Dirty Frag — Kernel Patches Patch series for the Dirty Frag...

7.8CVSS6.2AI score0.93235EPSS
SaveExploits34
Qualys Blog
Qualys Blog
added 2026/05/09 7:22 a.m.16 views

Dirty Frag: Using the Page Caches as an Attack Surface

Dirty Frag is a Linux local privilege escalation LPE chain published on May 7, 2026. It combines two previously unknown kernel vulnerabilities can allow an unprivileged local user to escalate to root on many major Linux distributions. xfrm-ESP Page-Cache Write CVE-2026-43284 RxRPC Page-Cache Writ...

8.8CVSS7.1AI score0.94545EPSS
SaveExploits363
GithubExploit
GithubExploit
added 2026/05/09 6:55 a.m.199 views

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

Copy Fail CVE-2026-31431 - Vulnerability Checker Conceptual...

7.8CVSS5.9AI score0.94545EPSS
SaveExploits234
GithubExploit
GithubExploit
added 2026/05/08 7:18 p.m.176 views

Exploit for Write-what-where Condition in Linux Linux_Kernel

Dirty Frag Technical Analysis CVE-2026-43284 xfrm-ESP / C...

7.8CVSS6.1AI score0.93235EPSS
SaveExploits34
GithubExploit
GithubExploit
added 2026/05/08 6:24 p.m.177 views

Exploit for Write-what-where Condition in Linux Linux_Kernel

Dirty Frag — kernel page-cache write tracking site Patch-stat...

7.8CVSS5.9AI score0.93235EPSS
SaveExploits32
Microsoft Secure
Microsoft Secure
added 2026/05/08 5:12 p.m.29 views

Active attack: Dirty Frag Linux vulnerability expands post-compromise risk

In this article 1. Why Dirty Frag matters 2. Technical overview 3. Exploitation scenarios 4. Mitigation guidance 5. Post-mitigation integrity verification 6. References A newly disclosed Linux local privilege escalation vulnerability known as “Dirty Frag” enables escalation from an unprivileged...

8.8CVSS6.5AI score0.93235EPSS
SaveExploits43
GithubExploit
GithubExploit
added 2026/05/08 4:14 p.m.196 views

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

CVE-2026-31431 - Exploit de Escalada de Privilegios en Linux...

7.8CVSS6AI score0.94545EPSS
SaveExploits234
GithubExploit
GithubExploit
added 2026/05/08 2:5 p.m.361 views

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

DIRTYFAIL A unified detector and PoC harness for the Copy...

7.8CVSS6.2AI score0.94545EPSS
SaveExploits264
GithubExploit
GithubExploit
added 2026/05/08 1:57 p.m.249 views

Exploit for Write-what-where Condition in Linux Linux_Kernel

DIRTY FRAG Detection with Wazuh 4.14.4 - CVE-2026-43284 / CVE-...

7.8CVSS6.3AI score0.93235EPSS
SaveExploits34
GithubExploit
GithubExploit
added 2026/05/08 12:3 p.m.218 views

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

pagecache-guard 中文文档 A runtime integr...

7.8CVSS7.1AI score0.94545EPSS
SaveExploits411
Information Security Automation
Information Security Automation
added 2026/05/08 11:0 a.m.10 views

About Elevation of Privilege vulnerability - Linux Kernel "Dirty Frag" (CVE-2026-43284, CVE-2026-43500) vulnerability

About Elevation of Privilege vulnerability - Linux Kernel "Dirty Frag" CVE-2026-43284, CVE-2026-43500 vulnerability. According to information from researcher Hyunwoo Kim @v4bel, Dirty Frag is a vulnerability a class of vulnerabilities that allows a local unprivileged attacker to obtain root...

8.8CVSS6.3AI score0.93235EPSS
SaveExploits34
GithubExploit
GithubExploit
added 2026/05/08 8:31 a.m.157 views

dirtyfrag-detection

dirtyfragprobe Non-exploitative detector for CVE-2026-3143...

7.8CVSS6AI score0.94545EPSS
SaveExploits234
Rows per page
Query Builder