Egregoros

https://lwn.net/Articles/1071719/

#DirtyFrag is a broken embargo.

Local Privilege Escalation to root.

Public working exploit. No CVE assigned yet.

No fix in sight.
<Edith> 7.0.5 was just released which has a fix <\Edith>

#infosec #cyber #tsunamiofvulns

This is the documentation & exploit of DirtyFrag:
https://github.com/V4bel/dirtyfrag/blob/master/README.md

There seen to be a fix in commit https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=f4c50a4034e62ab75f1d5cdd191dd5f9c77fdff4

That fix made it into 7.0.5 which was released 30 mins (?) ago

https://cdn.kernel.org/pub/linux/kernel/v7.x/ChangeLog-7.0.5

#dirtyfrag

@mcfly What do they mean by "embargo has been broken"? Someone just willy nilly published that exploit before the distro / kernel guys could react?

@miketango from what I can read in the discussion is that someone saw the fix in the commit and asked a LLM too build an exploit and published that.

That someone was not aware of an embargo

https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=f4c50a4034e62ab75f1d5cdd191dd5f9c77fdff4

I keep trying to find applications for LLMs in my work, and generally I find that they're pretty stupid.

But from the wash of recent security vulns that have been getting found, it's pretty clear that in the right hands, they are proving to be a very sharp tool.