Public
- Public
- Network
- Groups
- Featured
- Popular
- People

Conversation

Notices

Embed this notice
AlmaLinux (almalinux@fosstodon.org)'s status on Wednesday, 01-Jul-2026 09:02:53 JST AlmaLinux

📢 An unprivileged user inside a container can use this new Linux kernel local-privilege-escalation flaw, IPV6_FRAG_ESCAPE, to escape to a root shell on the host.
The vulnerable code path lives in the 6.12 kernel, which means only AlmaLinux 10 and Kitten 10 are affected.
Help us test the patched kernels: https://almalinux.org/blog/2026-06-30-ipv6-frag-escape/
In conversation about a month ago from fosstodon.org permalink
Attachments
1. Domain not in remote thumbnail source whitelist: almalinux.org
  
  IPV6_FRAG_ESCAPE vulnerability fix: Call for testing
  
  A new Linux kernel local-privilege-escalation flaw has been disclosed in the IPv6 fragmentation code, and it is serious: an unprivileged user inside a container can use it to escape to a root shell on the host. There is no CVE assigned yet, so for now we are referring to it as IPV6_FRAG_ESCAPE, the name its proof-of-concept uses. Only AlmaLinux 10 and AlmaLinux Kitten 10 are affected. A patched kernel for AlmaLinux 10 is available in the testing repository today, and we would like your help verifying it before we push it to production.
- James Morris likes this.

Feeds