Phying News
Curated security research, vulnerabilities, advisories and tools for practitioners.

Fragnesia: Linux Kernel Local Privilege Escalation via ESP-in-TCP

Summary

Fragnesia, a new DirtyFrag-family Linux LPE, abuses XFRM ESP-in-TCP skb coalescing and AES-GCM keystream manipulation to corrupt the page cache and overwrite /usr/bin/su in memory for root.
Published
Collected

original ↗

Related coverage

back