EmbeddingGemma 2: an open, lightweight multimodal embedding model
deepmind.google·6d ago
AI Engineering
Lobsters·24d ago·5 min read
A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill
TL;DR
Four local root vulnerabilities in the Linux kernel—DirtyAH6, PPPoEject, TUNderflow, and DiagSpill—have been disclosed, allowing unprivileged users to gain root access under specific conditions. These vulnerabilities have existed for 10-21 years and have received public fixes.
✦ Why It Matters
Update your Linux kernel to mitigate these vulnerabilities and protect against potential exploits.
Key Takeaways
- Update to the latest stable kernel versions to apply fixes.
- Disable unprivileged user namespaces to reduce risk.
- Consider disabling unused protocols like AH6 and PPPoE.
- Review security configurations for affected kernel modules.
Full Summary
The Linux kernel has been found to contain four significant local root vulnerabilities: DirtyAH6 (CVE-2026-80844), PPPoEject (CVE-2026-68121), TUNderflow (CVE-2026-81000), and DiagSpill (CVE-2026-74469). These vulnerabilities allow unprivileged users to escalate their privileges to root under certain conditions, with some requiring specific capabilities or user namespaces.
The underlying bugs have been present for 10 to 21 years, and the fixes have been integrated into stable kernel releases. Notably, DirtyAH6 and DiagSpill can be exploited remotely under specific circumstances, potentially leading to remote denial-of-service attacks.
Immediate mitigations include disabling unprivileged user namespaces and unused protocols like AH6, TUN, PPPoE, and SCTP. The vulnerabilities are particularly concerning for systems running affected kernel versions, as they could allow container escapes and other security breaches.