IPV6_FRAG_ESCAPE: The Linux Container Escape Your CVE Scanner May Miss
IPV6_FRAG_ESCAPE is a Linux kernel 6.12 privilege escalation with public PoC code, no CVE at disclosure time, and a practical path from container user to host root.
Kernel
4 articles
pedit COW & DirtyClone: Two New Linux Root Exploits That Bypass On-Disk Integrity Checks
CVE-2026-46331 and CVE-2026-43503 both corrupt the Linux page cache via network subsystems to grant root — bypassing file integrity tools like AIDE and Tripwire without touching files on disk.
SSH-keysign-pwn: The Nine-Year Linux Kernel Flaw
CVE-2026-46333 (ssh-keysign-pwn) is a nine-year-old Linux kernel race condition that lets an unprivileged local user steal SSH host keys and dump /etc/shadow. Root command execution is also possible on specific configurations.
Dirty Frag & Copy Fail: Two New Linux Kernel Vulnerabilities Grant Root Privileges
Two new Linux kernel vulnerabilities — Dirty Frag (CVE-2026-43284/43500) and Copy Fail (CVE-2026-31431) — enable local privilege escalation to root on nearly all major distros. What users and admins need to know.