Skip to content

Commit cd36565

Browse files
committed
Update information on stable kernels.
Signed-off-by: Kurt Garloff <kurt@garloff.de>
1 parent dc716a1 commit cd36565

1 file changed

Lines changed: 4 additions & 1 deletion

File tree

blog/2026-05-10-kernel-root-exploits.md

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -124,12 +124,14 @@ The fixes for Dirty Frag are still in development as of May 8. The first fixes
124124
have been merged upstream and released in 7.0.5, 6.18.28, 6.12.87, 6.6.138,
125125
6.1.172, 5.15.206 and 5.10.255 but there is
126126
[more to come for rxrpc](https://lwn.net/ml/all/2026050859-ahead-anchovy-05e2@gregkh/).
127+
Update 2026-05-11: 7.0.6 and 6.18.29 contain this last patch, older kernels don't need it.
127128
The responsible disclosure process for Dirty Frag unfortunately failed due to the
128129
[patches being spotted](https://www.openwall.com/lists/oss-security/2026/05/07/12),
129130
so the upstream maintainers and the distributors this time did not have time
130131
to carefully prepare and test fixes ahead of the publication of the issue.
131132
So we have to expect that it will take a few days until all Linux distributor
132-
manage to ship tested fixed kernels.
133+
manage to ship tested fixed kernels. Alma Linux has done so already, others are
134+
expected to follow soon.
133135

134136
A fully effective workaround is again to prevent loading the affected modules
135137
by placing another file `dirtyfrag.conf` in `/etc/modprobe.d/`:
@@ -254,3 +256,4 @@ SCS security contact is [security@scs.community](mailto:security@scs.community),
254256
- kubectl node-shell instructions, v0.2, 2026-05-09, 12:45 CEST.
255257
- Mention succssful patching of community infra, v0.3, 2026-05-09, 13:30 CEST.
256258
- Correct facts on the failure of the responsible disclosure. Release as v1.0, 2026-05-09, 20:00 CEST.
259+
- Update on final rxrpc fix in stable kernels. v1.1, 2026-05-12, 08:45 CEST.

0 commit comments

Comments
 (0)