Post

@mttaggart typical bros wanting to get noticed - it's irresponsible to disclose like this.

@mttaggart I love the beauty and simplicity of this exploit

@mttaggart

A missing continue.

I am sure Lint or an AI woud have found this logic bug. /s

#Coding

@mttaggart It also works on WSL.

@mttaggart

Editing to add:

RHEL has now updated the severity and the fix is no longer "deferred" for all affected OSes.

Looks like it requires a local user account, with a password set, to exploit, yes?

https://access.redhat.com/security/cve/cve-2026-31431

@mttaggart Debian 13 still vulnerable with 6.12.74

@mttaggart Can't privesc me if I always run as root!