It’s A Dirty Frag Frag Friday

Oh, Come The #%@& On!  Can We Not Have One Nice Weekend?

Dirty Frag, brought to you by the same rays of sunshine that introduced you to the Dirty Pipe and Copy Fail Linux vulnerabilities, is yet another horrific Linux vulnerability.  Just like the other two, Dirty Frag can be used to gain root access to just about any Linux system currently online.  To make your weekend even better, there are no patches, so you don’t have to spend the weekend patching systems and instead are free to focus on spending quality time with your feelings of existential dread.

Dirty Frag works by chaining two separate kernel flaws into a privilege escalation exploit in the same way as Dirty Pipe and Copy Fail, which you can at least protect against..  You have patched those, right?  They are being actively exploited, just like Dirty Frag is about to be, thanks to a leak of the exploit before anyone developed a patch.

2026 is quickly becoming the year of the Page-Cache Write vulnerability, in addition to the other wonderful things happening to us.