Dirty Frag Linux Zero-Day Exploited in the Wild for Local Privilege Escalation

Summary

Microsoft confirmed Dirty Frag is being exploited in the wild. The attack chains two Linux kernel flaws to write to unauthorized kernel caches and gain local privilege escalation; the transcript says no patches are available.

Key points

• Researcher Han Wu Kim discovered Dirty Frag, described as two Linux kernel vulnerabilities.
• Microsoft confirmed the flaws are being exploited in the wild.
• The attack chains the vulnerabilities to write to unauthorized kernel caches and achieve local privilege escalation.
• The transcript says the exploit does not require special permissions and does not cause system crashes.
• Kim released a proof of concept after a third party independently published an exploit, breaking the embargo.
• The transcript reports that no patches were available at the time of publication.