Briefing

PoC Exploit Released for DirtyDecrypt Linux Kernel Vulnerability

security
by [email protected] (The Hacker News) ·

Patch the kernel to the latest version that fixes DirtyDecrypt immediately to stop the PoC exploit.

What to do now

Patch the kernel to the latest version that fixes DirtyDecrypt immediately.

Summary

A proof‑of‑concept exploit has been released for the DirtyDecrypt (DirtyCBC) Linux kernel vulnerability, which was discovered and reported by the Zellic and V12 security team on May 9, 2026. The flaw, a local privilege escalation bug, allows a non‑privileged user to read sensitive files and execute arbitrary commands as root on affected systems. Although the kernel maintainers had already patched the issue, the PoC demonstrates that the vulnerability can be leveraged to gain full root privileges.

The exploit is a duplicate of an earlier vulnerability that had been reported years ago, but the new PoC shows a more practical attack vector. The PoC code is publicly available, making it a serious threat for any unpatched system. Administrators should apply the latest kernel update that fixes DirtyDecrypt immediately to prevent exploitation.

Key changes

  • PoC exploit released for DirtyDecrypt (DirtyCBC) kernel vulnerability
  • Allows local privilege escalation to root
  • Discovered by Zellic and V12 on May 9, 2026
  • Duplicate of earlier vulnerability but with practical attack vector
  • Patch already released in kernel
  • PoC demonstrates arbitrary command execution as root

Affects

enterprise internal

Customer impact

Analyzing matches…

Ask about this story

Impact on an agency? Which customers? Compare historically Risks of waiting