Post #2604729
2026-05-11 18:20 UTC
@rene_mobile@infosec.exchange
> After discovering Dirty Frag, Hyunwoo Kim was reportedly working with Linux developers to fix the issue before publicly disclosing it. However, an unnamed third party published a working proof of concept earlier than anticipated, forcing the researcher to disclose the vulnerability more than a month ahead of schedule.
https://www.techspot.com/news/112365-newly-disclosed-dirty-frag-vulnerability-left-linux-exposed.html
Replies (1)
-
@rene_mobile@infosec.exchange 2026-05-12 05:43
@rayk@techhub.social Nobody "forced" them to release all the details and talk to lots of press about #DirtyFrag. Before the press attention, I hadn't heard about it, and I assume that's true for _many_ others as well. Yes, some party may have leaked parts of the find in some limited groups. That doesn't mean the original finder needs to accelerate the publication manyfold.... Seen from the outside, this process created attention, credit, and marketing, but certainly not more security. I try not to guess people's intentions, but judge mostly by the outcome. And that was bad.