https://seclists.org/oss-sec/2026/q3/834: A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill
Published Sep 18, 2026
·Updated
Affected Software
1 affected component
Linux Kernel
Frequently Asked Questions
1
Can distributions reduce exposure by packaging less-common kernel modules separately?
The discussion suggests separating less-common modules into packages such as PPPoE or SCTP modules. However, this can create module compatibility concerns if modules built for one kernel configuration are loaded with a substantially different kernel configuration.
2
Is split module packaging practical for every distribution?
No. The Gentoo package manager does not support split subpackages, making this approach redundant for many source-built Gentoo systems and impossible for gentoo-kernel-bin or installations using --getbinpkg for gentoo-kernel.
3
What dependency information is needed if kernel modules are split into separate packages?
Package metadata needs to bind a module package to the exact parent kernel release and build identifier. A simple runtime dependency on a matching release tag and build ID may be insufficient if package managers represent build identifiers differently.