New Linux 'Dirty Frag' zero-day gives root on all major distros By Sergiu Gatlan May 8, 2026 03:45 AM A new Linux zero-day exploit, named Dirty Frag, allows local attackers to gain root privileges on most major Linux distributions with a single command. …
… This limits the attack surface to Linux distributions that closely follow the latest upstream kernel releases, including Fedora, Arch Linux, and openSUSE Tumbleweed. However, V12's proof-of-concept exploit has only been tested against Fedora and the mainline Linux kernel. …
… Impacted Linux distributions were notified three days later. …
… Just as Fragnasia, Dirty Frag has a publicly available PoC exploit that local attackers can use to gain root privileges on major Linux distributions. …
… Download Now Related Articles: New stealthy Quasar Linux malware targets software developers Hackers compromise Axios npm package to drop cross-platform malware Windows 11 and Microsoft Edge hacked at Pwn2Own Berlin 2026 Popular node-ipc npm package compromised to steal credentials Shai Hulud attac… …
… This drastically limits the attack surface, with V12 stating that the RDS module is enabled by default only on Arch Linux out of the most common Linux distros. "Sadly, the RDS kernel module this requires is only default on Arch Linux among the common distributions we tested," V12 added. …
… The scale of the operation is reflected in the more than 240 distribution URLs and 3,820 unique malicious JAR files. …
… Download Now Related Articles: New macOS stealer campaign uses Script Editor in ClickFix attack New Infinity Stealer malware grabs macOS data via ClickFix lures Popular node-ipc npm package compromised to steal credentials Shai Hulud attack ships signed malicious TanStack, Mistral npm packages Fake… …
Hackers hijack thousands of sites for ClickFix and FakeUpdate attacks By Bill Toulas June 1, 2026 06:14 PM A threat actor tracked as DriveSurge has been operating large-scale malware distribution campaigns using ClickFix and FakeUpdates techniques on compromised sites. …
