Four Linux Kernel Vulnerabilities Enable Local Privilege Escalation, Public Exploits Released

Four Linux kernel vulnerabilities (DirtyAH6, TUNderflow, PPPoEject, DiagSpill) enable local privilege escalation, with public exploit code released after coordinated fixes. Systems running outdated kernels face risks, though no real-world attacks have been reported yet.

A security researcher has released working exploit code for four Linux kernel flaws that each let a local user gain root, the highest level of access on a machine.

Kernel maintainers have fixed all four over the past few weeks, so a system running an up-to-date kernel is not affected. But the exploit code is now public, and any machine still running an older kernel should be updated.

The flaws

Read original article