Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root
Summary: Researcher Asim Manizada published working exploit code on September 18 for four Linux kernel flaws - DirtyAH6, TUNderflow, PPPoEject, and DiagSpill - that each let a local user gain root, after reporting them to the Linux kernel security team in mid-July and holding disclosure until fixes shipped. All four are memory-safety bugs in networking code, with underlying mistakes 10 to 21 years old, and three require unprivileged user namespaces to be enabled while DiagSpill needs only the SCTP module.
What you should know: The exploits are public and many distributions enable user namespaces by default, so any multi-user server or container host still on an older kernel gives a low-privileged account a documented path to full control - and Manizada found all four with an AI-assisted process, a method now producing a steady run of kernel root flaws.
Read the original at The Hacker News ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026