By Michael Larabel<\/p>\n\n\n\n
Linux 7.0.6 is out as stable this morning to finish mitigating the Dirty Frag vulnerability that was made public last week. In addition to Linux 7.0.6 stable, the Linux 6.18.29 LTS kernel was also released today with the sole change being this same patch from Hyunwoo Kim for resolving Dirty Frag. Another kernel update to fix the privilege escalation bug in Linux. And the mentioned kernels are online for use with rpi-update. https:\/\/www.phoronix.com\/news\/Linux-7.0.6-Released By Michael Larabel Linux 7.0.6 is out as stable this morning to finish mitigating the Dirty Frag vulnerability that was made public last week. The embargo was broken on Dirty Frag last week […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[],"class_list":["post-17164","post","type-post","status-publish","format-standard","hentry","category-tech"],"blocksy_meta":[],"featured_image_src":null,"author_info":{"display_name":"Jason","author_link":"https:\/\/jasonsblog.ddns.net\/index.php\/author\/jturning\/"},"_links":{"self":[{"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/posts\/17164","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/comments?post=17164"}],"version-history":[{"count":1,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/posts\/17164\/revisions"}],"predecessor-version":[{"id":17165,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/posts\/17164\/revisions\/17165"}],"wp:attachment":[{"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/media?parent=17164"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/categories?post=17164"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/tags?post=17164"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
The embargo was broken on Dirty Frag last week ahead of schedule and thus proper fixes for the Linux kernel were yet in place for taking care of this local privilege escalation issue. Dirty Frag makes it easy to go root on all Linux distributions<\/a> but thankfully Linux 7.0.6 is now out to fully resolve Dirty Frag.
The lone patch making up Linux 7.0.6 is “rxrpc: Also unshare DATA\/RESPONSE packets when paged frags are present<\/em>” for fixing an RXRPC issue from 2019.<\/p>\n\n\n\n<\/figure>\n\n\n\n
More background information on Dirty Frag and some temporary workarounds for bypassing this vulnerability can be found via the Dirty Frag GitHub repository<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"