14 matches found
EUVD-2026-71296
In the Linux kernel, the following vulnerability has been resolved: xfrm: drop ESP-in-TCP packets with no ingress device ESP-in-TCP receives records through the TCP strparser. handleesp restores skb-dev from the saved skbiif before passing the packet into the XFRM input path. Queued TCP data can ...
CVE-2026-80846
CVE-2026-80846 is a NULL pointer dereference in the Linux kernel affecting the XFRM ESP-in-TCP path. When queued TCP data is processed after the original ingress device has been removed (e.g., during veth or network namespace teardown), handle_esp() restores skb->dev from the saved skb_iif, bu...
Fragnesia-go
fragnesia-go Un SA. Un octet à la fois. Aucune course. Portage Go de fragnesia CVE-2026-46300. Membre de la classe de vulnérabilités Dirty Frag - bug distinct, même surface, correctif propre. Comment ça fonctionne tl;dr Le bug se situe dans le sous-système Linux XFRM ESP-in-TCP. Lorsque TCPULP...
CVE-2026-46300-Fragnesia---TryHackMe-Lab-Project
CVE-2026-46300-Fragnesia---TryHackMe-랩-프로젝트 이 프로젝트는 Fragnesia CVE-2026-46300 TryHackME 랩의 완료 및 분석을 문서화합니다. 이 랩은 디스크의 파일을 변경하지 않고 캐시된 파일 페이지를 수정하여 로컬 권한 상승을 달성할 수 있는 Linux 커널 페이지 캐시 손상 취약점을 시연합니다. 랩 목표 . Fragnesia 취약점 체인 이해. . Linux 페이지 캐시 손상 기술 분석. . 권한 없는 사용자에서 호스트 루트로의 권한 상승 관찰 . 다음 요소의 역할 이해:...
CVE-2026-46300
CVE-KERNEL · Chaîne LPE du noyau Linux Chaîne d'élévation de privilèges locale multi-CVE pour les vulnérabilités du noyau Linux uid=1000 → root via écriture dans le page-cache xfrm-ESP, RxRPC ou Fragnesia Vue d'ensemble CVE-KERNEL est un outil d'élévation de privilèges locale LPE basé sur Python...
CVE-2026-46300
🛡️ CVE-2026-46300 - Fragnesia Une attaque propre et mortelle par cache de pages Variante de la famille "Dirty Frag" 📌 Aperçu CVE-2026-46300 Fragnesia est un défaut logique de haute sévérité dans la gestion des tampons de socket du noyau Linux skbtrycoalesce au sein du sous-système XFRM/ESP-in-TCP...
USN-8548-2: Linux kernel vulnerabilities
It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. CVE-2026-43503 Several security issues...
USN-8530-2: Linux kernel (HWE) vulnerabilities
It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker...
USN-8530-2 linux-aws-hwe vulnerabilities
It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker...
USN-8615-2: Linux kernel (Raspberry Pi) vulnerabilities
It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. CVE-2026-43503 Several security issues...
kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel
A flaw was found in the Linux kernel's XFRM ESP-in-TCP subsystem. Unsafe in-place cryptographic processing allows a low-privileged local attacker to write arbitrary bytes into the page cache of read-only files, including sensitive system files. An attacker can exploit this to overwrite privileged...
kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel
A flaw was found in the Linux kernel's XFRM ESP-in-TCP subsystem. Unsafe in-place cryptographic processing allows a low-privileged local attacker to write arbitrary bytes into the page cache of read-only files, including sensitive system files. An attacker can exploit this to overwrite privileged...
Advisory ROSA-SA-2026-3295
Component: kernel-ml 5.15.208 OS: rosa-server79 Unaffected versions: = kernel-ml-5.15.208-1.0.1.res7 Affected versions: kernel-ml-5.15.208-1.0.1.res7 CVE-ID: CVE-2026-46300 BDU-ID: None CVE-Crit: Not available CVE-DESCRIPTION: A vulnerability in the XFRM ESP-in-TCP subsystem of Linux kernels. A...
