PoC Exploit Released for DirtyDecrypt Linux Kernel Vulnerability
Patch the kernel to the latest version that fixes DirtyDecrypt immediately to stop the PoC exploit.
Patch the kernel to the latest version that fixes DirtyDecrypt immediately.
Summary
A proof‑of‑concept exploit has been released for the DirtyDecrypt (DirtyCBC) Linux kernel vulnerability, which was discovered and reported by the Zellic and V12 security team on May 9, 2026. The flaw, a local privilege escalation bug, allows a non‑privileged user to read sensitive files and execute arbitrary commands as root on affected systems. Although the kernel maintainers had already patched the issue, the PoC demonstrates that the vulnerability can be leveraged to gain full root privileges.
The exploit is a duplicate of an earlier vulnerability that had been reported years ago, but the new PoC shows a more practical attack vector. The PoC code is publicly available, making it a serious threat for any unpatched system. Administrators should apply the latest kernel update that fixes DirtyDecrypt immediately to prevent exploitation.
Key changes
- PoC exploit released for DirtyDecrypt (DirtyCBC) kernel vulnerability
- Allows local privilege escalation to root
- Discovered by Zellic and V12 on May 9, 2026
- Duplicate of earlier vulnerability but with practical attack vector
- Patch already released in kernel
- PoC demonstrates arbitrary command execution as root