linux-announce AT lists.psi.ch

Subject: Linux Mailing List

List archive

[[Linux-announce] ] Dirty Frag: next Kernel vulnerability for gaining root access

From: "Konrad Bucheli (PSI)" <konrad.bucheli AT psi.ch>
To: linux-announce AT lists.psi.ch
Subject: [[Linux-announce] ] Dirty Frag: next Kernel vulnerability for gaining root access
Date: Fri, 8 May 2026 10:36:30 +0200
Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=psi.ch; dmarc=pass action=none header.from=psi.ch; dkim=pass header.d=psi.ch; arc=none
Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=lUbcStPoJi4AxwGM2deTxcIrGUjwy3o1hGcPy7mTLww=; b=UMSyZd7QEDxSo719ZuNGAupvEvSMyw6Gxq7Tltzo3KZmM8AI3u2EtmogBX/qpItxJ4d9rAb7DsZvg6xMZELkQB6xRr5WYhnwTruHX2DWQCgBki3m5CDcOuKkGqAVyB0x2lRfSA+J/LTf1TkmYbE7ItJDsTHxTYWxwYhu+rUsvYomFnBm02a+dBVx1YZUNENR9ZSccaRz2eFVcGA6dkbe8fz0P2AumzUOGMcGwJF15+nj+xIUGK9M5CYNomG0gu/fE1taTM8juaOQcwLXdsqh2xpYBmHx6Qw+Th7bw/+K4+8fpvjWKc9WtAlcjMTymkqVjj+FsL9jncIyI8d3EfH1ew==
Arc-seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=mPIWTMQr/X2yc3AI7aAQ54k9+V4/icROt10Z94uPuxxy2Yu74vkpaUIdYjBhbuzkTC9wFBLUMkaOjvgI6Pj+2tMDVX+//4L2rOHQDEyt6GjRAG2uMR3daq2kf+aeP4ovO7Okg0C5dYMlb3M07IqOF1RE+mJKy3HhFRaQXfdxIji3LHuamksqP0IO+YKGbi26VZkdpWYHfJm6ft7QNmq/6x0CHW5TZTNxCNA0QifjEVn2q3i1MYeMk/TATKotK3mJN31xBVdesmJg88pl/YK0NXihqmSfhF/Vgj9FFLqrpNCCzmIupLSqU5dpPXksK2Q0cItCUbUt18egUWfKa4bYog==
Authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=psi.ch;

Hi

Just after Copy Fail another similar issue was found: ⁠Dirty Frag:

https://github.com/V4bel/dirtyfrag

Also here we created a ⁠mitigation guide:

https://linux.psi.ch/admin-guide/dirty_frag_mitigation/

We will announce when there are new kernels available where this issue has been corrected.

Kind regards
Konrad

--
Paul Scherrer Institut
Konrad Bucheli
Linux Systems Engineer
Core Linux Research Services
Science IT Infrastructure and Services department (AWI)
OBBA/230
Forschungstrasse 111
5232 Villigen PSI
Switzerland

Phone: +41 56 310 27 24
konrad.bucheli AT psi.ch
www.psi.ch

[[Linux-announce] ] Dirty Frag: next Kernel vulnerability for gaining root access, Konrad Bucheli (PSI), 05/08/2026
- Re: [[Linux-announce] ] Dirty Frag: next Kernel vulnerability for gaining root access, Konrad Bucheli (PSI), 05/18/2026