Re:Dirty Frag: Universal Linux LPE
by TacticalCoder on Thursday May 07, 2026 @05:07PM
(#48055038)
From TFA:
> Dirty Frag belongs to the same class as Dirty Pipe and Copy Fail. However, while Dirty Pipe overwrites struct pipe_buffer, Dirty Frag overwrites the frag of struct sk_buff
> Dirty Frag belongs to the same class as Dirty Pipe and Copy Fail. However, while Dirty Pipe overwrites struct pipe_buffer, Dirty Frag overwrites the frag of struct sk_buff
So yup, Dirty Pipe is specifically mentioned.