Skip to content

Commit 0798988

Browse files
committed
Release. And fix info on the disclosure process.
Signed-off-by: Kurt Garloff <kurt@garloff.de>
1 parent a34cf64 commit 0798988

1 file changed

Lines changed: 3 additions & 1 deletion

File tree

blog/2026-05-10-kernel-root-exploits.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -124,7 +124,8 @@ The fixes for Dirty Frag are still in development as of May 8. The first fixes
124124
have been merged upstream and released in 7.0.5, 6.18.28, 6.12.87, 6.6.138,
125125
6.1.172, 5.15.206 and 5.10.255 but there is
126126
[more to come for rxrpc](https://lwn.net/ml/all/2026050859-ahead-anchovy-05e2@gregkh/).
127-
The responsible disclosure process for Dirty Frag was unfortunately broken,
127+
The responsible disclosure process for Dirty Frag unfortunately failed due to the
128+
[patches being spotted](https://www.openwall.com/lists/oss-security/2026/05/07/12),
128129
so the upstream maintainers and the distributors this time did not have time
129130
to carefully prepare and test fixes ahead of the publication of the issue.
130131
So we have to expect that it will take a few days until all Linux distributor
@@ -252,3 +253,4 @@ SCS security contact is [security@scs.community](mailto:security@scs.community),
252253
- Initial Draft, v0.1, 2026-05-08, 17:15 CEST.
253254
- kubectl node-shell instructions, v0.2, 2026-05-09, 12:45 CEST.
254255
- Mention succssful patching of community infra, v0.3, 2026-05-09, 13:30 CEST.
256+
- Correct facts on the failure of the responsible disclosure. Release as v1.0, 2026-05-09, 20:00 CEST.

0 commit comments

Comments
 (0)