Exploit / PoCcritical
DirtyDecrypt PoC Released for Linux Kernel CVE-2026
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-31431 | Local Privilege Escalation (Copy Fail) in Linux Kernel algif_aead Interface | 7.8 | 98% | KEVPoC ×12 | KEV |
| CVE-2026-31635 | Linux kernel: rxrpc: fix oversized RESPONSE authenticator length check rxgk_verify_response() decodes auth_len from the… | 7.5 | <1% | ||
| CVE-2026-41651 | PackageKit: PackageKit between and including versions 1.0.2 and 1.3.4 is vulnerable to a time-of-check time-of-use (TOCTOU) race condition on… | 8.8 | <1% | PoC ×3 | |
| CVE-2026-43284 | Linux kernel ESP-in-UDP decrypts in place over shared splice pages (CWE-123) | 8.8 | 94% | PoC | |
| CVE-2026-43500 | Out-of-bounds write in Linux kernel AF_RXRPC decryption enables root access | 7.8 | 93% | ||
| CVE-2026-46300 | Shared-frag marker loss in Linux kernel skb coalescing (LPE) | 7.8 | 16% | KEVPoC | KEV |
| CVE-2026-46333 | Linux kernel: ptrace: slightly saner 'get_dumpable()' logic | 7.1 | 4% | PoC |
From the original article
4 min read at thehackernews.com
Proof-of-concept (PoC) exploit code has now been released for a recently patched security flaw in the Linux kernel that could allow for local privilege escalation (LPE).
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.