IT之家 5 月 13 日消息,安全研究人员 Hyunwoo Kim 此前发现一项名为“Dirty Frag”的 Linux 内核漏洞。该漏洞属于本地权限提升(LPE)漏洞,允许黑客借助低权限账号直接获取 root 权限。该漏洞于 4 月 30 日向 ...
Dirty Frag exposes Linux systems to root escalation through chained kernel flaws, impacting Ubuntu, RHEL, Fedora, and others.
Fragnesia CVE-2026-46300 corrupts Linux page cache via XFRM ESP-in-TCP, enabling local root access on major distros.
A pair of newly disclosed Linux kernel vulnerabilities, collectively dubbed Fragnesia, allow a local attacker to corrupt the ...
A novel Linux Kernel cross-cache attack named SLUBStick has a 99% success in converting a limited heap vulnerability into an arbitrary memory read-and-write capability, letting the researchers elevate ...
The actively exploited flaw builds on Dirty Pipe and Copy Fail techniques to overwrite page cache and gain full system ...
Researchers from the Graz University of Technology have discovered a way to convert a limited heap vulnerability in the Linux kernel into a malicious memory writes capability to demonstrate novel ...
简单点来说,Copy Fail/CVE-2026-31431 提权漏洞的影响效果可以理解为,让一个普通用户在没有写权限的情况下,临时改掉了系统内存里某些本不该被修改的文件内容,然后借助这个机会,通过任意代码执行获得 root 权限。