THREATOPS
THREAT OPSThreat News › Re: A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill

Re: A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill

lowoss_secPublished 2026-09-19

<p>Posted by Greg Dahlman on Sep 19</p>I may be missing something but I do see a path that may be clean<br /> without inventing new package manager features or relying on brittle,<br /> text-based version strings. The concern regarding loose version<br /> matching and local source rebuilds breaking the ABI is real, but IMHO<br /> we don&apos;t need to invent a new package manager feature to fix it

Original source: https://seclists.org/oss-sec/2026/q3/843