↓ Skip to main content

“It all started a year ago with a support ticket about corrupt files.”

Max Kellermanndirtypipe.cm4all.com ↗

A customer’s gzipped access logs kept failing their CRC check. Kellermann chased that for ten months and found a Linux kernel bug, present since 5.8, that lets any user overwrite read-only files and get root. It is easier to exploit than Dirty Cow. He reproduced it on a Pixel 6, which means millions of phones now wait on vendors who are slow to ship kernel patches.