Fragnesia: Linux Kernel Local Privilege Escalation via ESP-in-TCP
wiz.io | vulnerability | #privilege-escalation | #linux-kernel | #vulnerability | #fragnesia | #dirtyfrag | #page-cache
Summary
Fragnesia, a new DirtyFrag-family Linux LPE, abuses XFRM ESP-in-TCP skb coalescing and AES-GCM keystream manipulation to corrupt the page cache and overwrite /usr/bin/su in memory for root.
- Published
- Collected
Skip to content