RefluXFS is a Linux kernel LPE flaw (CVSS 7.8). A race in the XFS copy-on-write path lets an unprivileged user overwrite any readable file on disk and become root. It works even under SELinux Enforcing.

Januscape is a KVM flaw that lets a guest escape to the host. A 16-year-old bug in the shadow MMU, working on both Intel and AMD, collapses multi-tenant isolation. Requires nested virtualization.

DirtyClone is a Linux kernel LPE flaw (CVSS 8.8). A local user gains root by overwriting /usr/bin/su in the page cache through a cloned network packet. No disk changes, no logs.

A week after CopyFail, the same researcher found another page cache escalation. Dirty Frag is a chain of two flaws in ESP (IPsec) and RxRPC. What it is, who is affected, and how to defend.

The new Vulnerabilities section in Kernel Security Checker: enter your kernel version, get a list of known public exploits matched to your kernel.

Comparison of three major kernel vulnerabilities: Dirty COW, Dirty Pipe and CopyFail. Different mechanisms, same result: page cache write and privilege escalation.

How to check your kernel’s vulnerability to CopyFail (CVE-2026-31431) using Kernel Checker on vmlinuz.pl. One minute and you know.

CVE-2026-31431 CopyFail — deterministic local privilege escalation via the algif_aead module. How it works, what’s affected, and how to protect yourself.