Active attack: Dirty Frag Linux vulnerability expands post-compromise risk

🗓️ 08 May 2026 17:12:46Reported by Microsoft Defender Security Research TeamType

Dirty Frag is a Linux local privilege escalation exploiting rxrpc and esp/xfrm to gain root after compromise.

Reporter	Title	Published	Views	Family All 1123
RedhatCVE	CVE-2026-43284	8 May 202608:42	–	redhatcve
RedhatCVE	CVE-2026-43500	11 May 202603:25	–	redhatcve
RedhatCVE	CVE-2026-46300	13 May 202616:00	–	redhatcve
RedHat Linux	Important: Red Hat Security Advisory: kpatch-patch-4_18_0-553_109_1, kpatch-patch-4_18_0-553_40_1, kpatch-patch-4_18_0-553_53_1, kpatch-patch-4_18_0-553_72_1, and kpatch-patch-4_18_0-553_85_1 security update	4 Jun 202621:43	–	redhat
RedHat Linux	kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel	4 Jun 202621:43	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: kpatch-patch-4_18_0-477_107_1, kpatch-patch-4_18_0-477_120_1, kpatch-patch-4_18_0-477_130_1, kpatch-patch-4_18_0-477_89_1, and kpatch-patch-4_18_0-477_97_1 security update	4 Jun 202621:24	–	redhat
RedHat Linux	kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel	4 Jun 202621:24	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: kpatch-patch security update	9 Jun 202613:49	–	redhat
RedHat Linux	kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel	9 Jun 202613:49	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.64 bug fix and security update	18 Jun 202616:11	–	redhat

08 May 2026 17:12Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.17.8 - 8.8

EPSS0.93235

SSVC