[PLUG] New Linux 'Dirty Frag' zero-day gives root on all major distros

[jeffv via plug <plug@lists.phillylinux.org>]

New Linux 'Dirty Frag' zero-day gives root on all major distros

https://www.bleepingcomputer.com/news/security/new-linux-dirty-frag-zero-day-with-poc-exploit-gives-root-privileges/


Dirty Frag works by chaining two separate kernel flaws, the xfrm-ESP 
Page-Cache Write vulnerability and the RxRPC Page-Cache Write 
vulnerability, to modify protected system files in memory without 
authorization and achieve privilege escalation.

Also, while Dirty Frag belongs to the same class as the Dirty Pipe and 
Copy Fail Linux vulnerabilities, it exploits the fragment field of a 
different kernel data structure.
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug