03:43
2026-05-28
news.ycombinator.com
ai-safety
Dirty Frag: a kernel zero-day vs. container and microVM sandboxes
On May 7, security researcher Hyunwoo Kim disclosed Dirty Frag, two Linux kernel vulnerabilities (CVE-2026-43284 and CVE-2026-43500) that grant unprivileged users deterministic root access on most Lin…