A security researcher has publicly released exploits for four recently patched Linux kernel vulnerabilities—DirtyAH6, TUNderflow, PPPoEject, and DiagSpill—that enable local users to escalate privileges to root. The flaws affect various networking components and primarily require unprivileged user namespaces enabled, except DiagSpill, which needs no special privileges if SCTP is present. Users are urged to update to patched kernel versions or disable unprivileged namespaces and affected features to mitigate risk.
https://thehackernews.com/2026/09/public-exploits-released-for-four-linux.html