Dirty Frag: overwriting read-only page cache from userspace to get unprivileged root (@v4bel) #infosec

Linux privilege escalation exploits are evolving fast. Defenders need telemetry that operates at the same layer attackers do. Today we added a new NEW_KERNEL_SOCKET event type to the LimaCharlie…