Dirty Frag: Universal Linux LPE - allows any unprivileged local user to gain root access on a vulnerable Linux system - no patch available
2026-05-07 21:16 UTC
Replies (13)
-
@inari@piefed.zip 2026-05-07 21:40
Good to see these exploits being found and worked on
-
@jodanlime@midwest.social 2026-05-07 21:55
Well shit. I wonder if all Linux systems are affected, the testing in the repo doesn’t cover Arch for instance. For now I’d assume the answer is yes.
-
@SocialistVibes01@lemmy.ml 2026-05-07 22:04
We’re living through the Linux’ enshittification era
-
@Mwa@thelemmy.club 2026-05-07 22:16
may become useful if i forgot my password.
-
@Bronstein_Tardigrade@lemmygrad.ml 2026-05-08 05:57
Funny that just after Microsoft commits suicide with Winders 11, Linux “exploits” start popping up like Whack-A-Moles. Makes one wonder if they were inserted by MS engineers.
-
@CodenameDarlen@lemmy.world 2026-05-07 22:49
What’s up with all these vulnerabilities? Kind of worried to be honest, two in like a week? Pretty scary. I’m very dumb about Linux technical stuff but I feel like root access is way too easy to be accessed. Is there any way to make it harder? I mean let’s say similar to Android, you need to unlock the boot loader first, flash a recovery and flash Magisk or something, that’s a good layer before root access. At least for Linux Desktop, maybe make it so we can get root access only via a bootable USB with a correct password? Just for sporadic system changes. Is there anything like that?
-
@Damage@feddit.it 2026-05-08 09:04
Ok this is the first time I try one of these exploits and it works on my system, I’m currently very spooked. On the other hand, this may allow me to root my LG WebOS TV?
-
@Ooops@feddit.org 2026-05-08 15:00
Update: Kernel 7.0.5 just relesed
-
@mecen@lemmy.ca 2026-05-08 15:24
It was patched in almalinux though
-
@Everyday0764@lemmy.zip 2026-05-09 00:32
I tried on nixos and did not work, but maybe the paths needs adjustments
-
@monovergent@lemmy.ml 2026-05-07 23:28
Can't wait for one that'll work on Android so I can maybe root some otherwise useless old phones
-
@warmaster@lemmy.world 2026-05-07 22:48
Does this affect immutable distros like Bazzite?
-
@MNByChoice@midwest.social 2026-05-08 02:35
Clearly you know of lot about this. Here are some comments for the next human. Deny all modules seems more possible than a whitelist approach. To deny all, the command is likely "sysctl kernel.modules_disabled=1". Whitelisting is harder. One could store a list of all loaded modules on a working system. Store a list of all kernel modules currently installed on the system. Compare the lists and remove from the "all" list the "running" list (grep will do this) and write it to the blacklist file. The problem with the Whitelisting approach is that it needs to run after every kernel module install (which is doable). If the above is the case, then someone must have automated this already, but I cannot find it quickly. (I checked Debian's package repository.)