News for hackers. Stuff that matters.

A comment on Dirty Frag: Universal Linux LPE.

Re:Dirty Frag: Universal Linux LPE by mehmetkeremmtl on Thursday May 07, 2026 @04:00PM (#48054109)
With a name like 'Dirty Frag', I'm guessing this is another memory fragmentation or page cache trick similar to Dirty Pipe?
[ Parent | on HN ]
Re:Dirty Frag: Universal Linux LPE by TacticalCoder on Thursday May 07, 2026 @05:07PM (#48055038)
From TFA:

> Dirty Frag belongs to the same class as Dirty Pipe and Copy Fail. However, while Dirty Pipe overwrites struct pipe_buffer, Dirty Frag overwrites the frag of struct sk_buff

So yup, Dirty Pipe is specifically mentioned.

[ Parent | on HN ]