Not an embargo breach, it seems. [LWN.net]

Not an embargo breach, it seems.

Posted May 8, 2026 1:11 UTC (Fri) by himi (subscriber, #340)
Parent article: Dirty Frag: a zero-day universal Linux LPE

More of a parallel publication, though the (re)discovery took a different path - working back from the fixes pushed to the netdev tree.

See https://www.openwall.com/lists/oss-security/2026/05/07/12 and https://afflicted.sh/blog/posts/copy-fail-2.html

to post comments

Not an embargo breach, it seems.

Posted May 8, 2026 8:41 UTC (Fri) by kleptog (subscriber, #1183) [Link]

AIUI we have two groups here:

* people that find issues, report it responsibly and organise a coordinated release
* people that watch the stream of committed patches and publish exploits on any bugs fixed

These groups are always going to interfere with each-other, basically water and fire. I suspect these two groups already have a wildly different idea of the value of embargos and coordinated releases and so don't communicate. I expect the result will be the victory of the second group over the first.