dirtyfrag-detection-rules

dirtyfrag-detection-rules Detection rules and analysis for Dirty Frag CVE-2026-43284/CVE-2026-43500 Linux kernel LPE vulnerability. Based on community research and health probe configurations...

CVE-2026-43284-dirtyfrag-detection

DirtyFrag CVE-2026-43284 PoC Validation and auditd Detection Scope: Linux Local Privilege Escalation LPE validation focused on the XFRM/ESP path associated with CVE-2026-43284. This repository contains an English report and evidence artifacts from a controlled laboratory validation of the public...

dirtyfrag-patches

Dirty Frag — Kernel Patches Patch series for the Dirty Frag vulnerability class discovered by Hyunwoo Kim @v4bel. Dirty Frag allows an unprivileged local user to overwrite arbitrary bytes of the page cache of read-only files e.g. /usr/bin/su, /etc/passwd leading to local privilege escalation to...

XCP_ng_CVE-2026-43284_tester

XCP-ng Dirty Frag Diagnostic — CVE-2026-43284 A community diagnostic tool to determine whether an XCP-ng dom0 host is exposed to CVE-2026-43284 "Dirty Frag", a local privilege escalation vulnerability in the Linux kernel's xfrm-ESP subsystem. TL;DR — All current XCP-ng releases 8.1, 8.2, 8.3...

CVE-2026-43284---DirtyFrag-Analysis-THM-

TryHackMe — CVE-2026-43284: Dirty Frag Room: CVE-2026-43284: Dirty Frag Category: Linux Privilege Escalation Author: My Page Overview Dirty Frag is a chained Linux local privilege escalation LPE room built around CVE-2026-43284. The goal is to go from an unprivileged shell to root by exploiting a...

Reporte-de-Escalada-de-Privilegios-Local-Dirty-Frag

Local Privilege Escalation Report — Dirty Frag Student: Jonatan Claudio 1. Requirements Methodology Summary A vulnerability assessment was performed on a virtual machine running Kali Linux using a detection script for the Dirty Frag vulnerability, associated with the following CVEs: CVE-2026-4328...

Dirty-Frag-CVE-2026-43284

DirtyFrag CVE-2026-43284 - Informe del Ejercicio de Detección en Laboratorio Clasificación: Laboratorio Interno - CyberLAB Fecha: 24 de mayo de 2026 Plataforma: Elastic Stack v9.4.1 Estado: Detección Confirmada Índice de Contenidos A - Resumen Ejecutivo B - Informe Completo de Hallazgos 1...

CVE-2026-43284

Dirty Frag — kernel page-cache write tracking site Source for the Dirty Frag patch-status tracker: a single-page site recording which distributions have shipped a fix for the paired page-cache write privilege-escalation chain in the Linux kernel. Where the facts live Everything about the bug — CV...

Dirty-Frag-Research-CVE-2026-43284-

CVE-2026-43284 Dirty Frag – Linux Kernel Vulnerability Research Overview This repository documents a complete defensive security research project focused on CVE-2026-43284 Dirty Frag , a Linux kernel vulnerability affecting the XFRM/IPsec networking subsystem. The goal of this project is not to...

Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284

Remote root@kitploit: git clone https://github.com/6abc/Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284.git && cd Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284 && gcc -O0 -Wall -o exp exp.c -lutil && ./exp root@kitploit: git clone...

ROOT-OS-DEBIAN-11-CVE-2026-43284 CVE-2026-43284 in linux - Patched by Root

Root has patched CVE-2026-43284 in the linux package for Root:Debian:11. Multiple fixed versions available...

Photon OS 5.0: Linux PHSA-2026-5.0-91-0846

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0846. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

B&R Automation X20EDS410 Write-what-where Condition (CVE-2026-43284)

The Linux kernel version shipped with the affected B&R product X20EDS410 is affected by a vulnerability. A flaw in the kernel's xfrm ESP input path that decrypts in place over shared skb frags. Successful local exploitation of this vulnerability could allow an authenticated attacker with low...

dirtyfrag

Dirty Frag: Universal Linux LPE Abstract !tuxasse...

RHEL 9 : kernel (RHSA-2026:16206)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:16206 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Dirty Frag is a new universal Local...

RHEL 9 : kernel-rt (RHSA-2026:16254)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:16254 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements...

Oracle Linux 10 : kernel (ELSA-2026-19074)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19074 advisory. - xfrm: esp: avoid in-place decrypt on shared skb frags CKI Backport Bot RHEL-174546 CVE-2026-43284 - crypto: authencesn - Do not place hiseq at end ...

Ubuntu 18.04 LTS : Linux kernel (AWS) vulnerabilities (USN-8530-1)

"The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8530-1 advisory. It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag....

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2026-50373)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50373 advisory. - net/sched: fix pedit partial COW leading to page cache corruption Rajat Gupta Orabug: 39668793 CVE-2026-46331 - net: skbuff: fix missing zerocop...

EulerOS Virtualization 2.13.1 : kernel (EulerOS-SA-2026-2517)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : xfrm: esp: avoid in-place decrypt on shared skb fragsCVE-2026-43284 Tenable has extracted the preceding description block directly...