DirtyDecrypt: New CopyFail / DirtyFrag variant

A new LPE targetting more recent Linux kernels has been released:

Requires CONFIG_RXGK=y in the kernel. Check using cat /boot/config-$(uname -r) | grep CONFIG_RXGK.

The feature appears to be fairly recent in terms of kernel age, so only newish Kernel releases seem to be affected. Ubuntu and Debian seem to not enable it, Fedora however seems to enable this feature. (7.X kernels seem to be affected, 6.8 doesn’t seem to be).

Seen on mastodon: Will Dormann: "There's apparently another Linux LPE. [DirtyDecry…" - Infosec Exchange

1 Like