{"id":241712,"date":"2026-05-08T10:45:00","date_gmt":"2026-05-08T14:45:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/05\/08\/critical-new-linux-zero-day-confirmed-hackers-get-root-no-patch-yet\/"},"modified":"2026-05-08T11:05:07","modified_gmt":"2026-05-08T15:05:07","slug":"critical-new-linux-zero-day-confirmed-hackers-get-root-no-patch-yet","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/05\/08\/critical-new-linux-zero-day-confirmed-hackers-get-root-no-patch-yet\/","title":{"rendered":"Critical New Linux Zero-Day Confirmed\u2014Hackers Get Root, No Patch Yet"},"content":{"rendered":"

Critical New Linux Zero-Day Confirmed\u2014Hackers Get Root, No Patch Yet<\/a><\/p>\n

https:\/\/www.forbes.com\/sites\/daveywinder\/2026\/05\/08\/critical-new-linux-zero-day-confirmed-hackers-get-root-no-patch-yet\/<\/a><\/p>\n

Publish Date: 2026-05-08 10:45:00<\/a><\/p>\n

Source Domain: www.forbes.com<\/a><\/p>\n

Dirty Frag Linux zero-day confirmed.<\/span><\/p>\n

getty<\/p>\n

If you thought that Linux was somehow the safe and secure choice of operating system, you might want to think again. Hot on the heels of the Copy Fail access vulnerability that had remained hidden for 9 years comes news that a new zero-day, with no patch available and granting hackers root, has been confirmed. Here\u2019s what we know about Dirty Frag and the workaround you can employ to mitigate against attacks.<\/p>\n

Forbes<\/span>Microsoft Says Edge Password Security Vulnerability Is \u2018By Design\u2019\u2014Is It Time To Switch To Chrome?<\/span>By Davey Winder<\/span><\/span><\/span><\/p>\n

What We Know About CVE-2026-43284, The Linux Dirty Frag Zero-Day<\/h2>\n

Why is it always a Friday? Just as security teams and end users alike look forward to the weekend, a security issue rears its ugly head, putting a stop to all that. With the major Linux distributions still rolling out patches for the Copy Fail vulnerability, which the U.S. Cybersecurity and Infrastructure Security Agency has confirmed is now being exploited by attackers, comes news that an even worse issue is out there. Dirty Frag, officially now tracked by the Common Vulnerabilities and Exposures database as CVE-2026-43284, has been confirmed and publicly disclosed, all before a patch is ready to roll.<\/p>\n

The reason for the May 8 public disclosure, according to the security researcher responsible, Hyunwoo Kim, was someone breaking the embargo that was in place. \u201cBecause the embargo has now been broken, no patches or CVEs exist for
these vulnerabilities,\u201d Kim said. After consulting with the Linux Distros Openwall maintainers, and at their request, Kim confirmed, \u201cI am publicly releasing this Dirty Frag document.\u201d<\/p>\n

Amazingly, just like Copy Fail before it in terms of age, the Dirty Frag privilege escalation flaw has been present in the Linux kernel, specifically its algif_aead cryptographic algorithm interface, for around nine years. <\/p>\n

Also, like Copy Fail, Kim said, \u201cDirty Frag likewise allows immediate root privilege escalation…<\/p>\n

Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Critical New Linux Zero-Day Confirmed\u2014Hackers Get Root, No Patch Yet https:\/\/www.forbes.com\/sites\/daveywinder\/2026\/05\/08\/critical-new-linux-zero-day-confirmed-hackers-get-root-no-patch-yet\/ Publish Date: 2026-05-08 10:45:00…<\/p>\n","protected":false},"author":1,"featured_media":241714,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/imageio.forbes.com\/specials-images\/imageserve\/69fdef6f9730dd6c490647f6\/0x0.jpg?format=jpg&height=900&width=1600&fit=bounds","fifu_image_alt":"","footnotes":""},"categories":[48],"tags":[90,89,71,57,27],"class_list":["post-241712","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-linux","tag-cve","tag-flaw","tag-linux","tag-security","tag-vulnerability"],"_links":{"self":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/241712"}],"collection":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=241712"}],"version-history":[{"count":1,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/241712\/revisions"}],"predecessor-version":[{"id":241716,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/241712\/revisions\/241716"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/241714"}],"wp:attachment":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=241712"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=241712"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=241712"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}