News for hackers. Stuff that matters.

A comment on Dirtyfrag: Universal Linux LPE.

Re:Dirtyfrag: Universal Linux LPE by KamiNuvini on Thursday May 07, 2026 @05:11PM (#48055106)
Does anyone know whether Debian is vulnerable? I tried the exploit on a Debian 12+Debian 13 machine but wasn't able to reproduce it myself.
[ Parent | on HN ]
Re:Dirtyfrag: Universal Linux LPE by thaniri on Thursday May 07, 2026 @06:00PM (#48055715)
I was able to reproduce this issue on kernel 6.12.57+deb13-amd64 running Debian 13 (Trixie), but unable to reproduce it on kernel 6.1.0-42-amd64 running Debian 12 (Bookworm).

For anyone not on the security stream of Debian packages for Bookworm, kernel version 6.1.0-42-amd64 is actually immune to copy.fail. Surprising that it looks to be immune to dirtyfrag. If you haven't already patched on the security stream, you can choose any kernel version that kept commit 2b8bbc64b5c2. I am thinking that the same commit might accidentally be keeping certain Debian 12 kernel versions safe from dirtyfrag as well.

[ Parent | on HN ]
Re:Dirtyfrag: Universal Linux LPE by cholmon on Thursday May 07, 2026 @05:53PM (#48055627)
I just tried the exploit on a fresh Debian 13 droplet on digitalocean and it worked.
[ Parent | on HN ]
Re:Dirtyfrag: Universal Linux LPE by louwrentius on Thursday May 07, 2026 @06:27PM (#48055956)
I tested on a fully up-to-date Debian 13 and the exploit works. The mitigation also works / confirmed.
[ Parent | on HN ]
Re:Dirtyfrag: Universal Linux LPE by baggy_trough on Friday May 08, 2026 @11:54AM (#48064893)
Debian 13 is offering linux-image-6.12.86+deb13 now.
[ Parent | on HN ]