Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2026-43284] Dirty Frag: Linux Kernel Local Privilege Escalation via ESP and RxRPC

wiz.io | vulnerability | CVE-2026-43284 | #privilege-escalation | #linux-kernel | #vulnerability | #infosec | #dirty-frag | #cve-2026-43284

Summary

Dirty Frag (CVE-2026-43284, CVE-2026-43500) chains page-cache write flaws in Linux's ESP and RxRPC subsystems for deterministic root escalation on major distros; public PoC out, patches pending.
Published
Collected

original ↗

Related coverage

  1. Fragnesia: Linux Kernel Local Privilege Escalation via ESP-in-TCP (wiz.io)
  2. Copy Fail: Universal Linux Local Privilege Escalation Vulnerability (wiz.io)
  3. [CVE-2026-90894] ParaShells: Parallels Desktop Turns Appliance Install Into a Root Shell (jfrog.com)
  4. CVE-2026-68398 PoC: Ubuntu PPPoL2TP kernel UAF local privilege escalation (github.com)
  5. CVE-2026-68138 PoC: Linux qdisc rate-table race local privilege escalation (github.com)
  6. Route of Root: Bring a "DoS only" bug to LPE and bypass the existing patch to win $10,500 in kernelCTF (nebusec.ai)

back