A week after CopyFail, the same researcher found another page cache escalation. Dirty Frag is a chain of two flaws in ESP (IPsec) and RxRPC. What it is, who is affected, and how to defend.
Kernel Security Checker: Check If Your Kernel Version Has Known Exploits
The new Vulnerabilities section in Kernel Security Checker: enter your kernel version, get a list of known public exploits matched to your kernel.
Dirty COW, Dirty Pipe, CopyFail: Three Ways to Root via Page Cache
Comparison of three major kernel vulnerabilities: Dirty COW, Dirty Pipe and CopyFail. Different mechanisms, same result: page cache write and privilege escalation.
Check If Your Kernel Is Vulnerable to CopyFail (CVE-2026-31431)
How to check your kernel’s vulnerability to CopyFail (CVE-2026-31431) using Kernel Checker on vmlinuz.pl. One minute and you know.
CopyFail (CVE-2026-31431) — 9 Years of Hidden Privilege Escalation in the Kernel
CVE-2026-31431 CopyFail — deterministic local privilege escalation via the algif_aead module. How it works, what’s affected, and how to protect yourself.
Linux 7.0 Officially Released — Key Changes Overview
Linux 7.0 hit mainline on April 12, 2026. Self-healing XFS, post-quantum module signatures, 12% faster UDP receive, Rust goes permanent, and more.
Kernel Hardening Part 3 — Check Your Boot Parameters
Kernel Security Checker now checks kernel boot parameters. Make sure your cmdline isn’t disabling security features.
Kernel Hardening Part 2 — Check Your Sysctl Settings
Kernel Security Checker now supports sysctl. Check your kernel runtime settings without recompiling.
Path Traversal — How Attackers Read Files from Your Server
What is path traversal, how it works, bypass techniques attackers use, and how to defend against it.
Kprobes — Dynamic Kernel Function Interception on Linux
How to use kprobes and kretprobes for dynamic kernel function interception on Linux. Practical examples with perf, bpftrace and debugfs.