A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, DiagSpill

The underlying bugs have been around for 10-21 years. The first three LPEs require either unprivileged user namespaces or specific CAPs (see below); DiagSpill does not.