New ‘Dirty Frag’ Linux Vulnerability Possibly Exploited in Attacks

A new Linux vulnerability called Dirty Frag, which chains two flaws to allow unprivileged users to gain root access, may already be exploited in the wild according to Microsoft. The vulnerability was prematurely disclosed before patches were ready, affecting major Linux distributions and the IPsec and RxRPC kernel components with a notably high success rate since it doesn't require timing-based race conditions. Major Linux vendors including Red Hat, Ubuntu, and Amazon Linux are now rolling out patches after Microsoft detected limited in-the-wild activity potentially indicating exploitation.