Good news. One fewer zero-day.

I'm sure removing the root user will prevent all escalation exploits. Can't get root if there is no root!

/j

Same workaround works here as with dirty frag. Just disable those kernel modules.

If this is quickly solved, there is nothing to worry about

Sorry if my english is bad

apparmor ftw

At this point we might as well just run everything as root anyway

what's a scenario where you could suffer from this vulnerability?

Scarry! Uoi guys on windows better stay away...ohhh privilege!

I think you might be able to deactivate this one by turning off XFRM support in a custom-configured kernel, at the cost of losing some types of tunneling. Not going to actually test that, though.

However, it is in the same surface and the mitigation is the same as for dirtyfrag.

phew

Where's the CVE? Was there an attempt at responsible disclosure? Was confidentiality breached? Did they coordinate this release with the devs like the dirtyfrag people did? This "announcement" doesn't answer any of these questions and I am frustrated by it.

EDIT: Ok, there IS a CVE: https://security-tracker.debian.org/tracker/CVE-2026-46300