DirtyFrag Drives Linux Privilege Escapes, Ubuntu Offline, and a Wave of Security Breaches

TL;DR Summary
DirtyFrag chains CopyFail and a new RPC flaw to corrupt the Linux page cache, enabling root-level code execution and potential persistence or container escapes with no patches yet; Ubuntu endured a prolonged DDoS outage that knocked update services offline; ShinyHunters breached the education software provider Infrastructure, exposing Canvas student data; other notes include Edge password vault memory exposure and DaemonTools backdoored, with continued TETRA-related activity and Oracle shifting to monthly security updates.
- This Week In Security: Another Linux Exploit, Ubuntu Knocked Offline, Finals Interrupted, And Backdoored Tools Hackaday
- Active attack: Dirty Frag Linux vulnerability expands post-compromise risk Microsoft
- Linux Kernel Dirty Frag LPE Exploit Enables Root Access Across Major Distributions The Hacker News
- Dirty Frag (CVE-2026-43284) Linux Privilege Escalation wiz.io
- 'Dirty Frag' Linux flaw one-ups CopyFail with no patches and public root exploit The Register
Reading Insights
Total Reads
0
Unique Readers
13
Time Saved
17 min
vs 18 min read
Condensed
98%
3,544 → 72 words
Want the full story? Read the original article
Read on Hackaday