Dirtyfrag: Universal Linux LPE

1. dirtyfrag

   1 11 0 - C

   

   > It’s an optional module that is loaded on demand.

   According to https://github.com/V4bel/dirtyfrag: "on Ubuntu, the rxrpc.ko module is loaded by default." And apparently the other modules are loaded, or loadable without privs, on the other distributions.

   It seems to be in default configuration on all distributions. So I think the complaint stands. Some obscure feature most of us don't need was enabled by default.

2. SaaSHub

   www.saashub.com featured

   SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

   

3. Copy-Fail-CVE-2026-31431-Kubernetes-PoC

   2 2 92 - C

   PoC: fully unprivileged container escape to node-level code execution on Kubernetes via CVE-2026-31431 page-cache corruption + shared image layers. Validated on Alibaba Cloud ACK, Amazon EKS and Google GKE.

   

   I got the same running it inside a container, but got a shell when running it directly in the host. This only shows that the exploit doesn't work inside a container. So, containers aren't vulnerable, or the script needs some adjustments to make it work in containers.

   Since copy fail can be used to escape containers (https://github.com/Percivalll/Copy-Fail-CVE-2026-31431-Kuber...), I'm guessing the exploit needs some changes only.

4. Copy_Fail2-Electric_Boogaloo

   3 5 0 - C

   Copy Fail 2: Electric Boogaloo

   

5. rhel-block-copyfail

   4 1 0 - C

   

6. seL4

   5 81 5,616 9.0 C

   The seL4 microkernel

   

   There's, in practice, unlimited such bugs in the megabytes of kernel object code.

   Monolithic UNIX-like kernels are a bankrupt design.

   Only third generation microkernels like seL4[0] make sense in the present world. All effort put elsewhere is wasted outright.

   0. https://sel4.systems/

Suggest a related project