Devastating 'Dirty Frag' exploit leaks out, gives immediate root access on most Linux machines since 2017, no patches available, no warning given — Copy Fail-like vulnerability had its embargo broken

Security researchers disclosed Dirty Frag, a Linux kernel logic flaw that can let any local user gain root privileges.

The bug affects networking code tied to IPSec and RxRPC page-cache writes, and may impact most Linux installs since 2017.

Because the embargo was broken early, vendors have no patch ready yet.

A temporary workaround is to disable the esp4, esp6, and rxrpc kernel modules.