How v4bel/dirtyfrag works
Dirty Frag is a single-file Linux local-privilege-escalation proof of concept. Its documented workflow chains the xfrm-ESP and RxRPC page-cache-write vulnerabilities; the sampled C excerpt also shows target-file setup and verification, RxRPC setup, and a later su shell stage. The README documents mitigation and affected versions, but this small repository has no separate runtime subsystem for them. Excerpts are partial, so internal exploit sequencing beyond the documented chain is not inferred.
Main entry points: exp.c Dirty Frag PoC
Components 7
Other components
- Authorized user
- Dirty Frag PoC
exp.c - xfrm-ESP variant
exp.c - RxRPC variant
exp.c - Page cache
- Target file
- Root shell
Connections 7
- Authorized user → Dirty Frag PoC: runs
README.md - Dirty Frag PoC → xfrm-ESP variant: chains variant
README.md - Dirty Frag PoC → RxRPC variant: chains variant
README.md - xfrm-ESP variant → Page cache: writes via
README.md - RxRPC variant → Page cache: writes via
README.md - Dirty Frag PoC → Target file: maps and verifies
exp.c - Dirty Frag PoC → Root shell: spawns via su
exp.c