Old Security Issues

Security Advisory – Dirty Frag

Overview

The "Dirty Frag" vulnerability is a critical Local Privilege Escalation (LPE) in Linux. It allows a local user to reliably gain root privileges on affected systems.

Measures (Priority: High)

As of now (April 8, 2026, 10:40), no updates are available to address this issue.

Therefore, until updates are released, a temporary mitigation must be applied.

Further details and action steps have been published on the following page:

https://unlimited.ethz.ch/spaces/CISEC/pages/469076534/Security+Advisory+%E2%80%93+Dirty-Frag

References:

https://thecybersecguru.com/news/dirty-frag-linux-kernel-root-vulnerability/

https://security-hub.ncsc.admin.ch/#/posts/12547

Last change: 08.05.2026 11:20

Security Advisory – Copy Fail (CVE-2026-31431)

Security Advisory – Copy Fail (CVE-2026-31431)

Overview

The “Copy Fail” (CVE-2026-31431) vulnerability is a critical local privilege escalation (LPE) in the Linux kernel. 

This allows a local user to gain root privileges with a high degree of reliability.

Measures (Priority: High)

Apply kernel updates (urgent)

• Install the latest security patches for the respective Linux distribution
• Reboot required!

As of now (30 April 2026, 10:40), there are no kernel updates available to apply.

For this reason, a temporary workaround must be applied until kernel updates are available.

We have published further details and steps to take on the following page:

https://unlimited.ethz.ch/spaces/CISEC/pages/465011850/Security+Advisory+–+Copy+Fail+CVE-2026-31431

References:

https://copy.fail

https://security-hub.ncsc.admin.ch/#/posts/12532

Last change: 30.04.2026 15:20

Phishing "Action Needed: Outgoing/Incoming emails blocked"

 Phishing mails with the subject "Action Needed: Outgoing/Incoming emails blocked" are currently in circulation. An ETH professor is mentioned as sender, but the senderaddress is most likely from gmail. Please ignore and delete these emails.

Last change: 22.04.2026 10:12

Phishing "Available for a few minutes?"

 
Phishing mails with the subject "Available for a few minutes?" are currently in circulation. An ETH professor is mentioned as sender, but the senderaddress is most likely from gmail. Please ignore and delete these emails.
 

Last change: 21.01.2026 12:37

Phishing "Dringende Maßnahmen erforderlich"

Phishing mails with the subject "Dringende Maßnahmen erforderlich" are currently in circulation. Please ignore and delete these emails.

Last change: 23.10.2025 15:33

Phishing "Are you in the lab?"

Phishing mails with the subject "Are you in the lab?" are currently in circulation. Please ignore and delete these emails.

Last change: 22.05.2025 10:15

Phishing "Dringende Aufgabe "

Phishing mails with the subject "Dringende Aufgabe" are currently in circulation. Please ignore and delete these emails.

Last change: 09.04.2025 12:34