Linux Root Vulnerabilities and Exploitation

Multiple critical vulnerabilities in Linux systems allow unprivileged users to gain root access through various exploits.

August 2017

Aug 1, 2017

Linux kernel cryptographic flaw introduced in commit

A logic flaw was introduced into the Linux kernel's cryptographic subsystem within the algif_aead module. This commit date marks when the vulnerability's root cause was added to the source code.

Source ↗

April 2026

Apr 10, 2026

Exploiting NSIS installer bugs in Zscaler Client Connector

The discussion mentions the exploitation of bugs within the NSIS installer package. This vulnerability allows for privilege escalation within the Zscaler Client Connector software.

Source ↗
Apr 24, 2026

CVE-2026-41651 vulnerability announced affecting Linux root access

The Pack2TheRoot flaw, tracked as CVE-2026-41651, was discussed. This vulnerability allows unprivileged local Linux users to install or remove system packages without authorization. The flaw is reported to potentially grant full root access.

Source ↗
Apr 29, 2026

CVE-2026-31431 logic bug discovered in Linux

A trivially exploitable logic bug, identified as CVE-2026-31431, affects Linux. The vulnerability is reachable on major distributions released within the last nine years.

Source ↗
Apr 30, 2026

Report details new Linux vulnerability for unprivileged root access

A discussion highlighted a new Linux vulnerability allowing any unprivileged user to gain root superuser access. The original post was published on this date, indicating the report's surfacing.

Source ↗

May 2026

May 1, 2026

CVE-2026-31431 vulnerability disclosed by Xint.io and Theori

Cybersecurity researchers disclosed details of a local privilege escalation (LPE) flaw, tracked as CVE-2026-31431. This vulnerability could allow an unprivileged local user to obtain root access.

Source ↗
May 1, 2026

Exploitation affects major Linux distributions since 2017

A Python exploit script was detailed that could allow root access on distributions including Amazon Linux, RHEL, SUSE, and Ubuntu. Exploitation requires corrupting the page cache of a setuid binary.

Source ↗
May 1, 2026

CVE-2026-31431 'Copy Fail' vulnerability disclosed

Cybersecurity researchers disclosed a Linux local privilege escalation (LPE) flaw, tracked as CVE-2026-31431. The flaw allows an unprivileged local user to obtain root access by manipulating the page cache of a readable file.

Source ↗
May 7, 2026

Dirty Frag Universal Linux LPE vulnerability reported

The vulnerability, named Dirty Frag, allows any unprivileged local user to gain root access on a vulnerable Linux system. The report indicated that no patch was available for the exploit at the time of posting.

Source ↗
May 7, 2026

Dirty Frag exploit detailed for linux-distros mailing list

The detailed information and exploit for the Dirty Frag vulnerability were submitted to the linux-distros mailing list. An embargo was set for 5 days regarding the publication of the exploit.

Source ↗