threat-intel
DirtyDecrypt PoC Released for Linux Kernel CVE-2026-31635 LPE Vulnerability
High
Summary
A Proof-of-Concept (PoC) exploit, dubbed DirtyDecrypt, has been released for a Linux kernel vulnerability (CVE-2026-31635) allowing for local privilege escalation. The vulnerability, related to a missing copy-on-write (COW) guard in the rxgk_decrypt_skb() function, affects distributions like Fedora, Arch Linux, and openSUSE Tumbleweed, particularly in containerized environments. Following the disclosure, a ‘killswitch’ proposal is being considered to mitigate the risk until a permanent patch is available, alongside other recent kernel vulnerabilities.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data