19 matches found
Dirty-Frag-CVE-2026-43284
DirtyFrag CVE-2026-43284 - Lab Detection Exercise Report Classification: Internal Lab - CyberLAB Date: 24 May 2026 Platform: Elastic Stack v9.4.1 Status: Detection Confirmed Table of Contents A - Executive Summary B - Full Findings Report 1. Objective and Threat Model 2. Vulnerability Background...
ansible-mitigate-copyfail-dirtyfrag
Ansible playbook to mitigate CopyFail, DirtyFrag and Fragnesia vulnerabilities Mitigate CopyFail CVE-2026-31431, DirtyFrag CVE-2026-43284 and Fragnesia CVE-2026-46300 vulnerabilities in the Linux Kernel using a simple but effective Ansible playbook. Use this Ansible Playbook to run against your...
dirtyfrag-arm64
dirtyfrag-arm64 arm64/aarch64 port of V4bel/dirtyfrag CVE-2026-43284, CVE-2026-43500. Tested on Ubuntu 24.04.4 LTS with linux-aws 6.17.0-1013-aws on AWS Graviton newest available as of this writing. Full writeup with AppArmor bypass analysis, hardening notes, and detection notes:...
DirtyFrag
Local Privilege Escalation / Container Escape CVE-2026-43284 / CVE-2026-43500 Usage: CGOENABLED=0 go build -ldflags="-s -w" -o dirtyfrag . ./dirtyfrag Affected Versions: Ubuntu 24.04.4 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS 14.04 LTS RHEL 8.x,9.x,10.1 CentOS 8,9,10 Rocky Linux 8,9,...
CVE-2026-43284-dirtyfrag-detection
DirtyFrag CVE-2026-43284 PoC Validation and auditd Detection Scope: Linux Local Privilege Escalation LPE validation focused on the XFRM/ESP path associated with CVE-2026-43284. This repository contains an English report and evidence artifacts from a controlled laboratory validation of the public...
CVE-2026-43284-CVE-2026-43500-scan
DirtyFrag Scanner & Patcher CVE-2026-43284 & CVE-2026-43500 用内部ネットワークツール SSH経由の自動Linux LPE監査・緩和 免責事項 : このツールは正当な内部セキュリティ監査専用に設計されています。あなたが所有していないシステムに対する許可のない使用は違反です。開発者: Gagaltotal666 - GhostGTR666 。 目次 CVEの背景 主な機能 インストールと要件 使用方法 コマンドオプション 緩和メカニズムと認証 緩和プロセス 出力例 JSONレポートのエクスポート トラブルシューティング...
tetragon-dirtyfrag
tetragon-dirtyfrag Blocking the DirtyFrag Linux privilege-escalation chain CVE-2026-43284 / CVE-2026-43500 at runtime with a Cilium Tetragon TracingPolicy. The policy SIGKILLs the public proof-of-concept at its socket-setup step, before it reaches the page-cache write that would give it root. Wha...
Exploit for Write-what-where Condition in Linux Linux_Kernel
DirtyFrag CVE-2026-43284 PoC Validation and auditd Detection...
SUSE SLES15 Security Update : kernel (SUSE-SU-2026:1778-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1778-1 advisory. The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix the following issue: This fixes the DirtyFrag issues: - CVE-2026-43284: xfrm: esp...
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix the following issue: This fixes the DirtyFrag issues: CVE-2026-43284: xfrm: esp: avoid in-place decrypt on shared skb frags bsc1264449. CVE-2026-43500: rxrpc and afs modules are disabled bsc1264450 Special Instructions and Notes: Pleas...
SUSE-SU-2026:1778-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix the following issue: This fixes the DirtyFrag issues: - CVE-2026-43284: xfrm: esp: avoid in-place decrypt on shared skb frags bsc1264449. - CVE-2026-43500: rxrpc and afs modules are disabled bsc1264450...
dirtyfrag-lab
DirtyFrag Detection Lab A self-contained detection engineerin...
dirtyfrag-detection
dirtyfragprobe Non-exploitative detector for CVE-2026-3143...
dirtyfrag-check
dirtyfrag-check A safe, read-only Python script to detect whe...
xfrm-ESP Page-Cache Write via CVE-2026-43284
CVE-2026-43284 is a Linux kernel page-cache write vulnerability in the IPsec/xfrm subsystem affecting ESP Encapsulating Security Payload fragmentation. Dubbed "DirtyFrag", the bug allows a local unprivileged user to gain write access to read-only page-cache pages by triggering a race condition in...
Fedora 42 : kernel (2026-87dc12705e)
The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-87dc12705e advisory. The 6.19.14-101 stable update contains a fix for the dirtyfrag vulnerability. This covers CVE-2026-43284 and CVE-2026-43500 Tenable has extracted th...
Fedora 44 : kernel (2026-8cffa03dad)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-8cffa03dad advisory. The 7.0.4 stable kernel rebase contains additional hardware support, new features, and a number of important fixes across the tree. It also contains...
Fedora 43 : kernel (2026-abc00fb4e8)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-abc00fb4e8 advisory. The 7.0.4 stable kernel rebase contains additional hardware support, new features, and a number of important fixes across the tree. It also contains...