--- title: "SERIOUSLY? AGAIN?" url: https://daily.dev/posts/seriously-again--yospurpll source_url: https://www.youtube.com/watch?v=8s9jaIPR7PU type: video:youtube source: "Low Level Learning" published: 2026-05-08T18:49:33.032Z updated: 2026-05-09T06:30:35.330Z tags: ["security", "linux"] reading_time: 12 upvotes: 2 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # SERIOUSLY? AGAIN? **[Low Level Learning](https://daily.dev/sources/lowlevellearning)** · 12 min read · 2 upvotes · 0 comments ## Summary A breakdown of 'Dirty Frag', a newly disclosed Linux local privilege escalation vulnerability (or rather two chained vulnerabilities) that follows closely after the Copy Fail exploit. The first variant abuses IPSec ESP's in-place decryption on nonlinear socket buffers (SKBs) to perform an out-of-bounds write into a page cache entry for /usr/bin/su. The second, more complex variant uses the RXRPC subsystem's F-Crypt block cipher, which also decrypts in place, and brute-forces the decryption key to overwrite /etc/password so that root has no password. Both bugs exploit the same primitive: splicing file descriptors to attach privileged pages to a socket buffer, then triggering an in-place crypto operation that skips copy-on-write protections. The author notes that AI-assisted vulnerability research is likely accelerating the discovery of such kernel exploit primitives. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: --- Tags: [#security](https://daily.dev/tags/security), [#linux](https://daily.dev/tags/linux) [View this post on daily.dev](https://daily.dev/posts/seriously-again--yospurpll)