190
Dirty Frag: Universal Linux LPE - allows any unprivileged local user to gain root access on a vulnerable Linux system - no patch available (github.com)
submitted 3 days ago by rabber@lemmy.ca to c/linux@lemmy.ml
76 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[-] jodanlime@midwest.social 7 points 2 days ago

Well shit. I wonder if all Linux systems are affected, the testing in the repo doesn't cover Arch for instance. For now I'd assume the answer is yes.

[-] CodenameDarlen@lemmy.world 12 points 2 days ago* (last edited 2 days ago)

Yea it works on arch, I just tested on my own PC:

OS: Arch Linux x86_64
Kernel: Linux 7.0.3-arch1-2

❯ ./exp
[root@arch dirtyfrag]# ls
README.md  assets  exp  exp.c
[root@arch dirtyfrag]# whoami
root

I updated it last week.

Edit: I just ran yay -Suy to update everything and still works.

[-] racoon@lemmy.ml 8 points 2 days ago* (last edited 2 days ago)

Have you tried updating your system with a less cheerful command? Like damn -Syu

[-] Remus86@lemmy.zip 9 points 2 days ago

I also just verified it worked on my Arch install. But running the mitigation command and rebooting effectively blocked it, and I'm on the Arch LTS kernel. I think the disabled modules are related to IPSec, which most desktop users don't really need.

[-] CameronDev@programming.dev 3 points 2 days ago

Did you have the modules loaded before running the exploit?

[-] Remus86@lemmy.zip 2 points 2 days ago

I did. No idea how or why, though.

[-] CameronDev@programming.dev 6 points 2 days ago* (last edited 1 day ago)

Its a kernel exploit, so probably. But I just checked my arch installs,and I don't have any of the kernel modules loaded. ~~Loading requires root anyway, so I think this may be fairly limited in reality?~~

Edit: seems the modules get loaded automatically :(

[-] ozymandias117@lemmy.world 2 points 2 days ago

They'll get loaded, even without root

[-] adarza@lemmy.ca 3 points 2 days ago* (last edited 2 days ago)

don't see 'em loaded here, either. trixie (dietpi) server, aurora (f44) desktop

this post was submitted on 07 May 2026
190 points (98.0% liked)

Linux

65137 readers
292 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 7 years ago
MODERATORS
AgreeableLandscape@lemmy.ml
nooter692@lemmy.ml
MarcellusDrum@lemmy.ml
cypherpunks@lemmy.ml
cyclohexane@lemmy.ml
d3Xt3r@lemmy.nz