Comment on Dirty Frag: Universal Linux LPEparentComments−TacticalCoder4moFrom TFA:Dirty Frag belongs to the same class as Dirty Pipe and Copy Fail. However, while Dirty Pipe overwrites struct pipe_buffer, Dirty Frag overwrites the frag of struct sk_buffSo yup, Dirty Pipe is specifically mentioned.
Comments
From TFA:
So yup, Dirty Pipe is specifically mentioned.