Linux Kernel Dirty Frag LPE Exploit Enables Root Access Across Major Distributions

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-05-08 05:12 UTC
  • Importiert: 2026-05-18 08:27 UTC
  • CVSS: 7.8
  • Quelle-ID: thn_global
  • uid_hash: b331ba776175413e43f6debc6148312ead9d8beb093eb8cf6ba7c4d1264d3257

Inhalt

Details have emerged about a new, unpatched local privilege escalation (LPE) vulnerability impacting the Linux kernel. Dubbed Dirty Frag, it has been described as a successor to Copy Fail (CVE-2026-31431, CVSS score: 7.8), a recently disclosed LPE flaw impacting the Linux kernel that has since come under active exploitation in the wild. The vulnerability was reported to Linux kernel maintainers

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-31431

HIGH

7.8

HIGH

7.8

2026-04-22

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews