Loading video...

Video Failed to Load

There was a problem loading this video. This could be due to a temporary network issue or the video might be unavailable.

Dirty Frag: Unfixed Root Exploit Makes All Linux Systems Vulnerable Due to a broken embargo, this severe root exploit has no patches available for any Linux distribution. Ubuntu, RHEL, openSUSE... they're all vulnerable.

The Lunduke Journal

34,876 subscribers

36,868 views • 2 months ago •via X (Twitter)

Science & Technology

Anya Rossi• Live Now

Private livecam show

0 Comments

No comments available

Comments from the original post will appear here

Related Videos

‼️ Dirty Frag: A Universal Linux Local Privilege Escalation via Page-Cache Write Primitives GitHub: Patches: CVE-2026-43284: A page-cache write flaw in the Linux kernel's xfrm-ESP (IPsec) subsystem that lets a local user corrupt read-only file pages via in-place decryption on shared skb fragments CVE-2026-43500: A sibling page-cache write flaw in the Linux kernel's RxRPC subsystem (AFS protocol) where the same fast-path pattern enables arbitrary plaintext writes into attacker-chosen pages, escalating to root

‼️ Dirty Frag: A Universal Linux Local Privilege Escalation via Page-Cache Write Primitives GitHub: Patches: CVE-2026-43284: A page-cache write flaw in the Linux kernel's xfrm-ESP (IPsec) subsystem that lets a local user corrupt read-only file pages via in-place decryption on shared skb fragments CVE-2026-43500: A sibling page-cache write flaw in the Linux kernel's RxRPC subsystem (AFS protocol) where the same fast-path pattern enables arbitrary plaintext writes into attacker-chosen pages, escalating to root

Dark Web Informer

18,534 views • 2 months ago

CVE-2023-3390: UAF on Linux Netfilter nftables MFT_MSG_NEWRULE leads to LPE. We exploit this tiny 1-day vuln to pwn all targets of Google's kernelCTF for the first time in history. Nice and clear triple-kill 🥳

CVE-2023-3390: UAF on Linux Netfilter nftables MFT_MSG_NEWRULE leads to LPE. We exploit this tiny 1-day vuln to pwn all targets of Google's kernelCTF for the first time in history. Nice and clear triple-kill 🥳

c0m0r1

67,444 views • 3 years ago

The Holdovers has turned into one of my favorite films of the decade. This movie is all heart. Paul Giamatti’s performance is so honest & even more vulnerable, it’s impossible to not root for this guy. This is one of those movies I universally recommend to family & friends.

The Holdovers has turned into one of my favorite films of the decade. This movie is all heart. Paul Giamatti’s performance is so honest & even more vulnerable, it’s impossible to not root for this guy. This is one of those movies I universally recommend to family & friends.

Cinema Tweets

206,358 views • 11 months ago

DirectorsConsole 1-Click Launcher Just published a 1-click launcher for this app. Great for enhancing prompts using ANY LLM provider (including local LLMs) and has storyboard canvas, etc. Works on ALL OS (Mac, Linux, Windows)

DirectorsConsole 1-Click Launcher Just published a 1-click launcher for this app. Great for enhancing prompts using ANY LLM provider (including local LLMs) and has storyboard canvas, etc. Works on ALL OS (Mac, Linux, Windows)

cocktail peanut

13,881 views • 5 months ago

Wisconsin Democrats refuse to even look for fraud. ❌ Vetoed a food stamp audit. ❌ Vetoed additional state auditors. I won't look the other way. As governor, I'll audit all of state government, root out fraud, protect taxpayers, and preserve these programs for the vulnerable.

Wisconsin Democrats refuse to even look for fraud. ❌ Vetoed a food stamp audit. ❌ Vetoed additional state auditors. I won't look the other way. As governor, I'll audit all of state government, root out fraud, protect taxpayers, and preserve these programs for the vulnerable.

Tom Tiffany

11,163 views • 20 days ago

South Carolina's justice system is broken. Our state has become a safe haven for pedophiles. Predators walk free, get slaps on the wrist, and exploit every gap in a system failing to protect the most vulnerable among us. We will not stop until it is fixed. Until our children are safe. Until justice is actually served.

South Carolina's justice system is broken. Our state has become a safe haven for pedophiles. Predators walk free, get slaps on the wrist, and exploit every gap in a system failing to protect the most vulnerable among us. We will not stop until it is fixed. Until our children are safe. Until justice is actually served.

Rep. Nancy Mace

19,291 views • 1 month ago

This is big... Anthropic just announced a model so powerful they won't release it to the public out of fear over the damage it will cause 😨 Claude Mythos Preview found thousands of zero-day exploits in every major operating system and web browser... The numbers are hard to believe: > $50 to find a 27-year-old bug in OpenBSD, one of the most security-hardened operating systems ever built > Under $1,000 to find AND build a fully working remote code execution exploit on FreeBSD that grants unauthenticated root access from anywhere on the internet > Under $2,000 to chain together multiple Linux kernel vulnerabilities into a complete privilege escalation exploit For context: these are the kinds of findings that previously required elite security researchers working for weeks. Anthropic engineers with no formal security training asked Mythos to find exploits overnight. They woke up to working code the next morning. The results were so impressive Anthropic assembled Apple, Google, Microsoft, Amazon, NVIDIA, and seven other organizations into Project Glasswing: A $100M defensive coalition. They're not releasing this model publicly. Instead, they're racing to patch the world's infrastructure before models like this proliferate.

This is big... Anthropic just announced a model so powerful they won't release it to the public out of fear over the damage it will cause 😨 Claude Mythos Preview found thousands of zero-day exploits in every major operating system and web browser... The numbers are hard to believe: > $50 to find a 27-year-old bug in OpenBSD, one of the most security-hardened operating systems ever built > Under $1,000 to find AND build a fully working remote code execution exploit on FreeBSD that grants unauthenticated root access from anywhere on the internet > Under $2,000 to chain together multiple Linux kernel vulnerabilities into a complete privilege escalation exploit For context: these are the kinds of findings that previously required elite security researchers working for weeks. Anthropic engineers with no formal security training asked Mythos to find exploits overnight. They woke up to working code the next morning. The results were so impressive Anthropic assembled Apple, Google, Microsoft, Amazon, NVIDIA, and seven other organizations into Project Glasswing: A $100M defensive coalition. They're not releasing this model publicly. Instead, they're racing to patch the world's infrastructure before models like this proliferate.

Josh Kale

4,063,084 views • 3 months ago

someone built an AI RED TEAM that maps your entire attack surface as a knowledge graph, finds every vulnerability, then EXPLOITS them to root access AUTONOMOUSLY its called RedAmon, 9,000 templates. 17 node types, actual Metasploit shells, not reports, no pentesters needed 6 phases of autonomous recon: subdomain discovery, port scanning, http probing, resource enumeration, vulnerability scanning, MITRE mapping every finding stored in a Neo4j graph with 17 node types and 20+ relationship types. the AI reasons about the graph, finds attack paths, and runs actual Metasploit exploits, actual shells stress-tested with zero vulnerability data, zero exploit modules, one instruction find a CVE and exploit it, it went from empty database to root-level RCE in 20 steps, researched the exploit on the web, crafted a custom deserialization payload, debugged itself when the first attempt failed next try, the server responded with root access, the highest privilege level on any Linux system. full control over everything the target was running node-serialize 0.0.4, a package with a critical deserialization flaw (CVE-2017-5941, CVSS 9.8), the server takes your cookie, decodes it, and passes it straight into unserialize() which executes any code inside it, the AI figured this out on its own with no hints built on LangGraph + MCP tool servers for naabu, nuclei, curl, metasploit. hunts leaked secrets across GitHub repos, 40+ regex patterns for AWS keys, Stripe tokens, database creds

someone built an AI RED TEAM that maps your entire attack surface as a knowledge graph, finds every vulnerability, then EXPLOITS them to root access AUTONOMOUSLY its called RedAmon, 9,000 templates. 17 node types, actual Metasploit shells, not reports, no pentesters needed 6 phases of autonomous recon: subdomain discovery, port scanning, http probing, resource enumeration, vulnerability scanning, MITRE mapping every finding stored in a Neo4j graph with 17 node types and 20+ relationship types. the AI reasons about the graph, finds attack paths, and runs actual Metasploit exploits, actual shells stress-tested with zero vulnerability data, zero exploit modules, one instruction find a CVE and exploit it, it went from empty database to root-level RCE in 20 steps, researched the exploit on the web, crafted a custom deserialization payload, debugged itself when the first attempt failed next try, the server responded with root access, the highest privilege level on any Linux system. full control over everything the target was running node-serialize 0.0.4, a package with a critical deserialization flaw (CVE-2017-5941, CVSS 9.8), the server takes your cookie, decodes it, and passes it straight into unserialize() which executes any code inside it, the AI figured this out on its own with no hints built on LangGraph + MCP tool servers for naabu, nuclei, curl, metasploit. hunts leaked secrets across GitHub repos, 40+ regex patterns for AWS keys, Stripe tokens, database creds

chiefofautism

70,129 views • 5 months ago

Linux is the most widespread operating system, globally – but how is it built? Few people are better to answer this than Greg Kroah-Hartman (Greg K-H): Greg has been a Linux kernel maintainer for 25 years, and one of the 3 Linux Kernel Foundation Fellows (the other two are Linus Torvalds and Shuah Khan). Greg manages the Linux kernel’s stable releases, and is a maintainer of multiple kernel subsystems. We cover the inner workings of Linux kernel development, exploring everything from how changes get implemented to why its community-driven approach produces such reliable software. Greg shares insights about the kernel's unique trust model and makes a case for why engineers should contribute to open-source projects. Watch or listen: • YouTube: • Spotify: • Apple: Brought to you buy: • WorkOS — The modern identity platform for B2B SaaS. • Vanta — Automate compliance and simplify security with Vanta. Check out all of our current sponsor and their offerings: ---- One of the most surprising things I learned about Linux: although 4,000 developers contribute to the project from 500 companies per year, and has around 800 kernel maintainers, the project is run with email, git... and that's about it! No dedicated project managers, no regular meetings across the group. It's a truly fascinating and unique model (and only applies to the Linux kernel project: not to Linux distributions.) We go into more detail about this topic with Greg in the podcast as well.

Linux is the most widespread operating system, globally – but how is it built? Few people are better to answer this than Greg Kroah-Hartman (Greg K-H): Greg has been a Linux kernel maintainer for 25 years, and one of the 3 Linux Kernel Foundation Fellows (the other two are Linus Torvalds and Shuah Khan). Greg manages the Linux kernel’s stable releases, and is a maintainer of multiple kernel subsystems. We cover the inner workings of Linux kernel development, exploring everything from how changes get implemented to why its community-driven approach produces such reliable software. Greg shares insights about the kernel's unique trust model and makes a case for why engineers should contribute to open-source projects. Watch or listen: • YouTube: • Spotify: • Apple: Brought to you buy: • WorkOS — The modern identity platform for B2B SaaS. • Vanta — Automate compliance and simplify security with Vanta. Check out all of our current sponsor and their offerings: ---- One of the most surprising things I learned about Linux: although 4,000 developers contribute to the project from 500 companies per year, and has around 800 kernel maintainers, the project is run with email, git... and that's about it! No dedicated project managers, no regular meetings across the group. It's a truly fascinating and unique model (and only applies to the Linux kernel project: not to Linux distributions.) We go into more detail about this topic with Greg in the podcast as well.

Gergely Orosz

50,945 views • 1 year ago

An evacuation was initiated in Belgorod due to heating problems, according to Russian media. 🔥🔥🔥 Those dirty, disgusting, brainwashed Russians are getting what they've been doing to the Ukrainians for the past four years. This involves vulnerable population groups. Furthermore, water is being drained from the heating systems of 455 residential buildings, 17 schools, 25 kindergartens, and other facilities. All that remained was a lone, drunken street musician.

An evacuation was initiated in Belgorod due to heating problems, according to Russian media. 🔥🔥🔥 Those dirty, disgusting, brainwashed Russians are getting what they've been doing to the Ukrainians for the past four years. This involves vulnerable population groups. Furthermore, water is being drained from the heating systems of 455 residential buildings, 17 schools, 25 kindergartens, and other facilities. All that remained was a lone, drunken street musician.

Jürgen Nauditt 🇩🇪🇺🇦

22,556 views • 5 months ago

Nebula Security is now backed by Y Combinator. We’re celebrating by bringing you the world’s first Android 17 root demo — “IonStack”, a url click can let attacker fully control your phone. This is not only an Android root demo. We’re bringing you a full chain browser-to-kernel exploit with two 0-day vulnerabilities affecting Firefox before v151.0.2 and all Linux distros in 15 years. "IonStack" demonstrates how bad actors can control your phone by sending a malicious URL, but good news, Nebula Security found it before attackers do. Both 0-day were found by our code scanning agent, VEGA, overshadowing any vulnerabilities found by Mythos or any scanner you name it. VEGA has demonstrated its extraordinary capability in finding critical bugs in the world’s most complicated software: operating systems and browsers. It can spot the same vulnerabilities in your codebase too. VEGA support full scan and incremental scan that can integrated into your CI/CD flow. We launched VEGA within YC companies and received overwhelmingly positive feedback. Now it is open to all enterprise customers in private beta. Book a demo with us:

Nebula Security is now backed by Y Combinator. We’re celebrating by bringing you the world’s first Android 17 root demo — “IonStack”, a url click can let attacker fully control your phone. This is not only an Android root demo. We’re bringing you a full chain browser-to-kernel exploit with two 0-day vulnerabilities affecting Firefox before v151.0.2 and all Linux distros in 15 years. "IonStack" demonstrates how bad actors can control your phone by sending a malicious URL, but good news, Nebula Security found it before attackers do. Both 0-day were found by our code scanning agent, VEGA, overshadowing any vulnerabilities found by Mythos or any scanner you name it. VEGA has demonstrated its extraordinary capability in finding critical bugs in the world’s most complicated software: operating systems and browsers. It can spot the same vulnerabilities in your codebase too. VEGA support full scan and incremental scan that can integrated into your CI/CD flow. We launched VEGA within YC companies and received overwhelmingly positive feedback. Now it is open to all enterprise customers in private beta. Book a demo with us:

Nebula Security

219,814 views • 1 month ago

🚨The left has completely destroyed black society & it was all BY DESIGN 🚨 Teen Takeovers are sweeping through American cities & no one is addressing the root cause for a lasting solution against this madness!

🚨The left has completely destroyed black society & it was all BY DESIGN 🚨 Teen Takeovers are sweeping through American cities & no one is addressing the root cause for a lasting solution against this madness!

Melissa Tate

60,870 views • 1 month ago

Reflecting on the events this week, I am reminded of 1 Tim 6:10, “For the love of money is a root of all kinds of evil…” Corruption is destroying our communities and nation. Corruption, in any form, has a negative ripple effect on life everywhere!

Reflecting on the events this week, I am reminded of 1 Tim 6:10, “For the love of money is a root of all kinds of evil…” Corruption is destroying our communities and nation. Corruption, in any form, has a negative ripple effect on life everywhere!

Julius Rwotlonyo

60,454 views • 2 years ago

No pause for food delivery riders during Pakistan's monsoon. Abdullah Abbas wades through Lahore's flooded streets, struggling to push his broken motorcycle and deliver a food order on time. Working in monsoon conditions makes Abbas vulnerable to electrocution and infectious diseases, fever, flu and body ache, but the student says he has no choice

No pause for food delivery riders during Pakistan's monsoon. Abdullah Abbas wades through Lahore's flooded streets, struggling to push his broken motorcycle and deliver a food order on time. Working in monsoon conditions makes Abbas vulnerable to electrocution and infectious diseases, fever, flu and body ache, but the student says he has no choice

AFP News Agency

11,604 views • 10 months ago

Linus Charles wrote Linux at 21 from his mother's apartment in Helsinki and he just explained the philosophy that made him give it all away for free: "When I started Linux, I needed an operating system for my own use, and today you find Linux everywhere." "In small embedded devices, supercomputers, this technology allows you to expand into many different niches." "Working in an open source project where you work with hundreds, potentially thousands of people, makes the whole technology even more interesting." "One of the nice things about Linux and open source in general is that there's a lot of different things and everybody has something that you can give to the project." PS. We post daily content strictly for dedicated entrepreneurs, so if you’re one of them, make sure to follow us Entrepreneurs on X for more. Like and repost if you found value in this post:

Linus Charles wrote Linux at 21 from his mother's apartment in Helsinki and he just explained the philosophy that made him give it all away for free: "When I started Linux, I needed an operating system for my own use, and today you find Linux everywhere." "In small embedded devices, supercomputers, this technology allows you to expand into many different niches." "Working in an open source project where you work with hundreds, potentially thousands of people, makes the whole technology even more interesting." "One of the nice things about Linux and open source in general is that there's a lot of different things and everybody has something that you can give to the project." PS. We post daily content strictly for dedicated entrepreneurs, so if you’re one of them, make sure to follow us Entrepreneurs on X for more. Like and repost if you found value in this post:

Entrepreneurs on X

12,486 views • 2 months ago

"As much as this hurts for our kids, how do you not have respect and root for a team that had to figure some things out too along the way and has battled injuries?" Lindsay Gottlieb has all the respect for Geno Auriemma and UConn 🤍

"As much as this hurts for our kids, how do you not have respect and root for a team that had to figure some things out too along the way and has battled injuries?" Lindsay Gottlieb has all the respect for Geno Auriemma and UConn 🤍

Yahoo Sports

91,353 views • 1 year ago

It no longer rains but pours for South Africa. Likely to face African isolation due to violation of migrants human rights. The US has now imposed 12.5% tariff on goods, accusing South Africa of using forced labour . South Africa needs Africa. All these happenings make South Africa vulnerable to the external forces.

It no longer rains but pours for South Africa. Likely to face African isolation due to violation of migrants human rights. The US has now imposed 12.5% tariff on goods, accusing South Africa of using forced labour . South Africa needs Africa. All these happenings make South Africa vulnerable to the external forces.

Limukani Mathe Ph.D

71,328 views • 4 days ago

🚨 Gemini 3.0 Pro - ONE SHOTTED I asked it for UBUNTU web os as everyone asked me for it and the result is mind blowing. prompt : Create a fully functional Linux desktop environment (Ubuntu/GNOME style) as a complete web operating system in a single HTML file with embedded CSS and JavaScript. All applications must be fully functional Use whatever libraries to get this done but make sure I can paste it all into a single HTML file and open it in Chrome.make it interesting and highly detail , shows details that no one expected go full creative and full beauty in one code block

🚨 Gemini 3.0 Pro - ONE SHOTTED I asked it for UBUNTU web os as everyone asked me for it and the result is mind blowing. prompt : Create a fully functional Linux desktop environment (Ubuntu/GNOME style) as a complete web operating system in a single HTML file with embedded CSS and JavaScript. All applications must be fully functional Use whatever libraries to get this done but make sure I can paste it all into a single HTML file and open it in Chrome.make it interesting and highly detail , shows details that no one expected go full creative and full beauty in one code block

Chetaslua

260,060 views • 9 months ago

Victor Blythe spent years hiding behind his credentials as a psychotherapist to gain the trust of vulnerable children, all while secretly collecting and trading the most exploitative images imaginable. He didn't just collect thousands of images of children being sexually abused; he encouraged others to exploit children. No sentence can undo the harm he caused, but this one ensures he is held accountable. We will continue to pursue anyone who preys on children with every tool we have.

Sensitive content

Victor Blythe spent years hiding behind his credentials as a psychotherapist to gain the trust of vulnerable children, all while secretly collecting and trading the most exploitative images imaginable. He didn't just collect thousands of images of children being sexually abused; he encouraged others to exploit children. No sentence can undo the harm he caused, but this one ensures he is held accountable. We will continue to pursue anyone who preys on children with every tool we have.

US Attorney Pirro

188,997 views • 1 month ago