59
Dirty Frag: Universal Linux LPE - allows any unprivileged local user to gain root access on a vulnerable Linux system - no patch available (github.com)
submitted 4 months ago by to c/linux@programming.dev
19 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 6 points 4 months ago (4 children)

Are there any real life scenarios where an untrusted user is allowed access to a machine with an unprivileged account? I know there are (or were?) some public shared machines where you can ssh in for fun, but those aren't serious.

I'm thinking maybe a POS system or kiosk running Linux, and there's shell access? This could possibly also be useful for jailbreaking devices that ship with Linux, but are locked down... Maybe like a car infotainment system?

  • permalink
  • fedilink
  • source
  • hideshow 4 child comments
    •
  • [–] [S] 7 points 4 months ago

    Pretty much all those examples, but the real danger is chaining this exploit with others

    Perhaps someone is sitting on a couple exploits to get them into a system, but only to an unprivileged user, this would be a great final act

  • permalink
  • fedilink
  • source
  • parent