Re: A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill
oss-security follow-up on four Linux kernel local root vulnerabilities — DirtyAH6, PPPoEject, TUNderflow, DiagSpill — praising the advisory's disclosure quality.
A commenter on oss-security discusses the disclosure of four Linux kernel local privilege escalation vulnerabilities dubbed DirtyAH6, PPPoEject, TUNderflow, and DiagSpill. The post commends the advisory for listing fix commits, affected stable versions, exploitation prerequisites, vulnerable versions, and concrete mitigation targets. No CVE identifiers or confirmed in-the-wild exploitation are mentioned in the post.
- Four Linux local root vulnerabilities disclosed: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill
- Advisory includes fix commits, affected stable versions, and exploitation prerequisites
- Affected subsystems listed to enable targeted mitigations
- Commenter notes more LPE disclosures appear to be coming
- Vendors
- Linux
- Products
- Linux kernel
From the original article
Posted by Valtteri Vuorikoski on Sep 18 Credit where it's due: this is an excellent announcement (except for the bugs of course): * List of fix commits. * List of stable versions containing the fix. * Detailed pre-requisites for exploitation.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.