A new Linux zero-day called Dirty Frag lets local attackers gain root privileges on major distributions with a single command, by chaining two kernel flaws in the algif_aead interface. Hyunwoo Kim disclosed the issue with a PoC, and no CVE or patch is available yet for affected systems including Ubuntu, Red Hat Enterprise Linux, CentOS Stream, AlmaLinux, openSUSE Tumbleweed, and Fedora. #DirtyFrag #HyunwooKim #Ubuntu #RedHatEnterpriseLinux #CentOSStream #AlmaLinux #openSUSETumbleweed #Fedora

Monday hit like a cron job with anger issues. A busted auth path here, a repo-side faceplant there, some "patched-ish" thing already getting chewed on in the wild, and then the usual bonus round: poisoned dev tools, sketchy forum chatter, phishing kits pretending to be productivity, and AI lowering the bar for people who already thought 'curl | sh' had a personality. The vibe is simple: old

Threat actors are exploiting a long-standing Linux kernel vulnerability, CVE-2026-31431 (dubbed Copy Fail), that allows authenticated users with code execution to modify in-memory cache pages of readable setuid-root binaries and obtain a root shell. CISA has added the flaw to its Known Exploited Vulnerabilities catalog and urged rapid patching, while Microsoft...

A researcher has disclosed the details of an unpatched vulnerability that was expected to pose a serious threat to many Linux systems.

An anonymous reader shared this report from The Hacker News: Two information disclosure flaws have been identified in apport and systemd-coredump, the core dump handlers in Ubuntu, Red Hat Enterprise...