36 matches found
Exploit for Write-what-where Condition in Linux Linux_Kernel
Local privilege escalation / Container escape: CVE-2026-43284 /...
PT-2026-08: Local Privilege Escalation Vulnerabilities in the Linux Kernel (Dirty Frag)
This security advisory provides information regarding Linux kernel vulnerabilities: CVE-2026-43284 and CVE-2026-43500 , informally known as Dirty Frag. These vulnerabilities allow for local privilege escalation to the superuser root level and affect the Linux kernel modules: esp4 , esp6 and rxrpc...
Exploit for Write-what-where Condition in Linux Linux_Kernel
CVE-2...
Metasploit Wrap Up 05/29/2026
More Linux LPEs Hark the age of the Linux LPE has arrived. This week’s release follows up on recent work bringing new Linux LPEs to Metasploit users. Copy Fail seemed to have kicked off a trend of similar bugs and hot on its heels is Dirty Frag. Dirty Frag is actually two vulnerabilities in a...
Important: kernel-livepatch-6.12.83-113.160
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb frags "Dirty Frag" and other issues in Amazon Linux kernels: https://aws.amazon.com/security/security-bulletins/2026-027-aws/ CVE-2026-43284 In the Linux kernel, the...
rxkad Page-Cache Write via CVE-2026-43500
CVE-2026-43500 exploits a memory-corruption vulnerability in the Linux kernel's RxRPC authentication subsystem rxkad. When a crafted DATA packet is delivered to an AFRXRPC socket configured with an attacker-controlled rxkad session key, the kernel's rxkadverifypacket1 function performs an in-plac...
SUSE SLES15 Security Update : kernel (SUSE-SU-2026:1907-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1907-1 advisory. The SUSE Linux Enterprise 15 SP5 kernel was updated to fix the following issue: Security issues fixed: - CVE-2026-43284: xfrm: esp:...
Exploit for Out-of-bounds Write in Linux Linux_Kernel
CVE-2026-43500 / CVE-2026-43284 / Dirty Frag mitigation rxrpc...
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to fix the following issue: Security issues fixed: CVE-2026-43284: xfrm: esp: avoid in-place decrypt on shared skb frags bsc1264449. CVE-2026-43500: rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present bsc1264450. CVE-2025-5451...
SUSE-SU-2026:1900-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-54518: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache bsc1264013. - CVE-2026-46300: net: skbuff: propagate shared-frag marker...
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues The following security issues were fixed: CVE-2025-54518: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache bsc1264013. CVE-2026-46300: net: skbuff: propagate shared-frag marker...
CVE-2026-43500 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-aws, linux-qemu, linux-vmware, linux-gcp, linux-qemu-rc, linux-qemu-melange...
SUSE SLES16 Security Update : kernel (SUSE-SU-2026:21610-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:21610-1 advisory. The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: Dirty...
SUSE-SU-2026:21690-1 Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-54518: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache bsc1264013. - CVE-2026-46300: net: skbuff: propagate...
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 kernel was updated to fix the following issue: CVE-2026-43284: xfrm: esp: avoid in-place decrypt on shared skb frags bsc1264449. CVE-2026-43500: rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present bsc1264450. Special Instructions and Notes: Plea...
OPENSUSE-SU-2026:20743-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: Dirty Frag fixes: - CVE-2026-43500: supported.conf: drop rxrpc completely bsc1264450 - CVE-2026-43284: xfrm: esp: avoid in-place decrypt on shared skb frags bsc1264449...
SUSE-SU-2026:21590-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: Dirty Frag fixes: - CVE-2026-43500: supported.conf: drop rxrpc completely bsc1264450 - CVE-2026-43284: xfrm: esp: avoid in-place decrypt on shared skb frags bsc1264449...
SUSE-SU-2026:21610-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: Dirty Frag fixes: - CVE-2026-43500: supported.conf: drop rxrpc completely bsc1264450 - CVE-2026-43284: xfrm: esp: avoid in-place decrypt on shared skb frags bsc1264449...
BELL-CVE-2026-43500
Bulletin has no description...
Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-50260)
"The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50260 advisory. - In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6xmit Use RCU in ip6xmit in order to use dstdevrcu to...