And another...

[r3pek@mastodon.r3pek.org]

And another...

Fragnesia Made Public As Latest Linux Local Privilege Escalation Vulnerability

Following last week's disclosure of the Dirty Frag vulnerability for the Linux kernel, which only finished being patched up in mainline on Monday, Fragnesia is now public as a similar local privilege escalation (LPE) vulnerability.

(www.phoronix.com)

#linux #lpe #fragnesia

[mttaggart@infosec.exchange]

@r3pek Luckily this one is mitigated by the same fix as for DirtyFrag.

[r3pek@mastodon.r3pek.org]

@mttaggart but there's a new kernel patch

[r3pek@mastodon.r3pek.org]

@mttaggart
> This is a separate bug in the ESP/XFRM from dirtyfrag which has received its own patch.

pocs/fragnesia at main · v12-security/pocs

poc it like it's hot. Contribute to v12-security/pocs development by creating an account on GitHub.

GitHub (github.com)

[mttaggart@infosec.exchange]

@r3pek Right I understand that, but mitigations are applied faster than kernel patches, and luckily the mitigations are the same.