*** This bug is a security vulnerability ***

Public security bug reported:

The dirty frag vulnerability is like the copy.fail vulnerability. See:
* https://www.openwall.com/lists/oss-security/2026/05/07/8
* https://github.com/V4bel/dirtyfrag/blob/master/assets/write-up.md
* https://askubuntu.com/q/1566558/1004020

kmod should mitigate this via `install ... /bin/false` like done for
copy.fail.

** Affects: kmod (Ubuntu)
     Importance: Undecided
         Status: New

** Information type changed from Private Security to Public Security

** Description changed:

  The dirty frag vulnerability is like the copy.fail vulnerability. See:
  * https://www.openwall.com/lists/oss-security/2026/05/07/8
  * https://github.com/V4bel/dirtyfrag/blob/master/assets/write-up.md
+ * https://askubuntu.com/q/1566558/1004020
  
  kmod should mitigate this via `install ... /bin/false` like done for
  copy.fail.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2151831

Title:
  Dirty frag vulnerability needs mitigation

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/kmod/+bug/2151831/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to