Linux Kernel Dirty Frag LPE Exploit Enables Root Access Across Major Distributions
2026-05-08T07:24:19Z•b0234134c36c39df755938730e6c723fd74474b726f75ce165d45c8df683e88d
active-exploitationapache-http2credential-theftiot-botnetlinux-kernellocal-privilege-escalationmetinfo-cmsnodejs-vulnerabilitypalo-alto-pan-osremote-code-executionsupply-chain-compromiseweaver-e-cology
What happened
The Hacker News digest highlights multiple high-impact, actively exploited vulnerabilities and supply-chain threats: an unpatched Linux kernel local privilege escalation dubbed "Dirty Frag" (successor to Copy Fail), Ivanti EPMM RCE (CVE-2026-6973) under limited active exploitation, Palo Alto PAN‑OS unauthenticated RCE (CVE-2026-0300) observed in the wild, critical Apache HTTP/2 flaw (CVE-2026-23918) with potential RCE, MetInfo CMS RCE (CVE-2026-29014) actively exploited, and Weaver E‑cology unauthenticated RCE (CVE-2026-22679). Also notable: multiple critical sandbox-escape bugs in the vm2 npm
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- b0234134c36c39df755938730e6c723fd74474b726f75ce165d45c8df683e88d
- Enrichment time
- 2026-05-08T07:24:19Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.