12 matches found
CVE-2026-46300
🛡️ CVE-2026-46300 - Fragnesia Un attacco pulito e letale alla cache delle pagine Variante della famiglia "Dirty Frag" 📌 Panoramica CVE-2026-46300 Fragnesia è un difetto logico di elevata gravità nella gestione dei buffer socket skbtrycoalesce del kernel Linux, all'interno del sottosistema...
CVE-2026-46300
CVE-KERNEL · Linux-Kernel-LPE-Kette Multi-CVE-Kette zur lokalen Rechteausweitung für Linux-Kernel-Schwachstellen uid=1000 → root über xfrm-ESP-, RxRPC- oder Fragnesia-Page-Cache-Write Übersicht CVE-KERNEL ist ein Python-basiertes Tool zur lokalen Rechteausweitung LPE, das mehrere Linux-Kernel-CVE...
CVE-2026-46300-Fragnesia---TryHackMe-Lab-Project
CVE-2026-46300-Fragnesia---TryHackMe-Lab-Project Il progetto documenta il completamento e l'analisi del laboratorio TryHackME Fragnesia CVE-2026-46300, che dimostra una vulnerabilità di corruzione della cache delle pagine del kernel Linux in grado di ottenere l'escalation dei privilegi locali...
Fragnesia-go
fragnesia-go Una SA. Un byte alla volta. Nessuna race. Porting Go di fragnesia CVE-2026-46300. Membro della classe di vulnerabilità Dirty Frag - bug separato, stessa superficie, patch propria. Come funziona tl;dr Il bug si trova nel sottosistema Linux XFRM ESP-in-TCP. Quando TCPULP espintcp viene...
USN-8548-2: Linux kernel vulnerabilities
It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. CVE-2026-43503 Several security issues...
USN-8530-2: Linux kernel (HWE) vulnerabilities
It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker...
USN-8530-2 linux-aws-hwe vulnerabilities
It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker...
USN-8615-2: Linux kernel (Raspberry Pi) vulnerabilities
It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. CVE-2026-43503 Several security issues...
kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel
A flaw was found in the Linux kernel's XFRM ESP-in-TCP subsystem. Unsafe in-place cryptographic processing allows a low-privileged local attacker to write arbitrary bytes into the page cache of read-only files, including sensitive system files. An attacker can exploit this to overwrite privileged...
kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel
A flaw was found in the Linux kernel's XFRM ESP-in-TCP subsystem. Unsafe in-place cryptographic processing allows a low-privileged local attacker to write arbitrary bytes into the page cache of read-only files, including sensitive system files. An attacker can exploit this to overwrite privileged...
Advisory ROSA-SA-2026-3295
Component: kernel-ml 5.15.208 OS: rosa-server79 Unaffected versions: = kernel-ml-5.15.208-1.0.1.res7 Affected versions: kernel-ml-5.15.208-1.0.1.res7 CVE-ID: CVE-2026-46300 BDU-ID: None CVE-Crit: Not available CVE-DESCRIPTION: A vulnerability in the XFRM ESP-in-TCP subsystem of Linux kernels. A...
