Linux Has Another Page-Cache Root Bug
DirtyDecrypt is the latest Linux local privilege escalation tied to page-cache corruption, and public proof-of-concept code makes it a priority for rolling-release systems and exposed developer workstations.
// Topic
DirtyDecrypt is the latest Linux local privilege escalation tied to page-cache corruption, and public proof-of-concept code makes it a priority for rolling-release systems and exposed developer workstations.
Linux 7.1-rc4 brings the usual pile of hardware fixes and security updates, but the more interesting shift is procedural: the kernel is documenting responsible AI use and what qualifies as a security bug.
ssh-keysign-pwn is a Linux kernel flaw that lets unprivileged local users read root-owned files on affected systems, including SSH host keys and shadow password data.