DirtyDecrypt PoC Released for Linux Kernel CVE-2026-31635 LPE Vulnerability

Proof-of-concept code for CVE-2026-31635 (DirtyDecrypt), a Linux kernel local privilege escalation vulnerability, has been released.

• •Missing copy-on-write guard in rxgk_decrypt_skb() allows writes to privileged process memory and page cache
• •Affects distributions with CONFIG_RXGK enabled such as Fedora, Arch Linux, and openSUSE Tumbleweed
• •One of several similar vulnerabilities (Copy Fail, Dirty Frag, Fragnesia) disclosed in recent weeks
• •Linux kernel developers proposed "killswitch" mechanism to temporarily disable vulnerable functions as emergency mitigation

This summary was automatically generated by AI based on the original article and may not be fully accurate.