tldrdailynews.com logo

Dirty Frag: Linux zero-day chains kernel flaws to grant root on major distros

1 min read
Source: BleepingComputer
Dirty Frag: Linux zero-day chains kernel flaws to grant root on major distros
Photo: BleepingComputer
TL;DR

A new Linux local privilege escalation called Dirty Frag chains two kernel page-cache write flaws (xfrm-ESP and RxRPC) to gain root on most major distributions; a PoC and full documentation were released after an embargo was breached. Patches are not yet available; mitigations involve disabling esp4, esp6, and rxrpc modules (which breaks IPsec VPNs). CVEs are CVE-2026-43284 and CVE-2026-43500; CISA warns about similar risks and urges patching and mitigation where possible.

Topics:businesstechnology#kernel#linux#root-access#technology#vulnerability#zero-day
Share this article
  1. New Linux 'Dirty Frag' zero-day gives root on all major distros  BleepingComputer
  2. Active attack: Dirty Frag Linux vulnerability expands post-compromise risk  Microsoft
  3. Linux Kernel Dirty Frag LPE Exploit Enables Root Access Across Major Distributions  The Hacker News
  4. Dirty Frag (CVE-2026-43284) Linux Privilege Escalation  wiz.io
  5. 'Dirty Frag' Linux flaw one-ups CopyFail with no patches and public root exploit  The Register

Want the full story? Read the original reporting

Read on BleepingComputer