Skip to main content

Security Notice for Linux Kernel CVE-2026-43284 ('Dirty Frag')

· 5 min read
Toradex
Toradex
Research & Development Team

Summary​

A security vulnerability (CVE-2026-43284) found in the Linux kernel may allow a local unprivileged user to escalate privileges to root. To exploit this vulnerability, an attacker only needs:

  • the ability to create user namespaces
  • permission to execute at least one setuid binary (for example, sudo, passwd, or fusermount)

Any standard Linux user account with shell access typically meets these requirements.

Security Notice for Linux Kernel CVE-2026-31431 ('Copy Fail')

· 5 min read
Toradex
Toradex
Research & Development Team

Description​

A security vulnerability (CVE-2026-31431) has been found in the Linux kernel that could be exploited to allow privilege escalation to root by any authorized user of the system who can (1) create sockets, and (2) have read and execute permissions on at least one setuid binary (e.g. sudo, fusermount, passwd). Any user account with shell access will generally meet these criteria. The attack does not require the attacker to have knowledge of the unprivileged user's password to execute; simply having control of an unprivileged local user account that can create sockets and execute at least one setuid binary is sufficient.

Security Notice for CVE-2025-32463 (sudo)

· 4 min read
Toradex
Toradex
Research & Development Team

A security vulnerability (CVE-2025-32463) has been found in sudo that could be exploited to allow privilege escalation to root by any authorized user of the system who can execute shell commands. The attack does not require the attacker to have knowledge of the unprivileged user's password to execute; simply the ability to run sudo at all is sufficient. All versions of sudo beginning with 1.9.14 are affected, and there is no workaround or mitigation possible. The issue is patched in sudo version 1.19.17p1, released on June 30, 2025.

Send Feedback!