dirtyfrag

Dirty Frag: Универсальный LPE для Linux Аннотация В этом документе описывается класс уязвимости Dirty Frag, впервые обнаруженный и описанный Hyunwoo Kim @v4bel, который может получить привилегии root на основных дистрибутивах Linux путем объединения уязвимости xfrm-ESP Page-Cache Write...

Dirty-Frag-CVE-2026-43284

Dirty Frag CVE-2026-43284 وCVE-2026-43500 مختبر إعادة إنتاج وكشف لسلسلة تصعيد صلاحيات محلية في نواة لينكس. الحالة: تم التحقق. أكملت إعادة الإنتاج والتحقق بدون ملفات والكشف على مستوى استدعاءات النظام في المختبر النواة 6.18.9+kali-amd64. هذه الوثيقة سجل مخبري. كل ادعاء أدناه تمت ملاحظته أثناء تشغيل...

CVE-2026-43284

🚨 CVE-2026-43284 - Dirty Frag 🚨 Élévation de privilèges locale universelle du noyau Linux 📋 Aperçu Dirty Frag également connu sous le nom de Copy Fail 2 est une vulnérabilité d'élévation de privilèges locale à fort impact dans le noyau Linux. Elle permet à un utilisateur local non privilégié...

DIRTY-FRAG-Detection-with-Wazuh-4.14.4

Détection de DIRTY FRAG avec Wazuh 4.14.4 - CVE-2026-43284 / CVE-2026-43500 Ingénierie de détection pour l'élévation de privilèges locale LPE du noyau Dirty Frag - Ubuntu / RHEL / Debian / Amazon Linux Qu'est-ce que Dirty Frag ? CVE-2026-43284 / CVE-2026-43500 est une élévation de privilèges loca...

afalg-check

Itsumma AFALG Check Utilitaire de diagnostic pour Linux qui vérifie : la disponibilité de AFALG / algifaead et aide à évaluer le risque lié à CVE-2026-31431 copy-fail ; la présence d'une surface d'attaque pour la classe de vulnérabilités Dirty Frag chaîne xfrm-ESP Page-Cache Write + RxRPC...

yc-mk8s-copy-fail-mitigation

Copy Fail / Dirty Frag Mitigation for Yandex Managed Kubernetes Application automatique de la mitigation pour les vulnérabilités CVE-2026-31431, CVE-2026-43284 et CVE-2026-43500 dans le noyau Linux sur tous les nœuds worker du cluster Yandex Managed Kubernetes. Description de la vulnérabilité...

DirtyFrag-Detector

🔍 Dirty Frag — CVE-2026-43284 / CVE-2026-43500 탐지 스크립트 TL;DR: 두 가지 새로운 Linux 커널 버그가 있습니다. 이 스크립트는 시스템이 취약한지 알려줍니다. 패치를 적용하세요. 이게 뭔가요? 2026년 5월 7일, 보안 연구원 Hyunwoo Kim@v4bel이 Dirty Frag 라는 취약점 클래스를 공개적으로 공개했습니다. 패치가 준비되기 전에 엠바고가 깨지면서 예정보다 일찍 공개된 것입니다. 이 취약점은 권한이 없는 로컬 사용자가 루트 권한을 얻을 수 있게 합니다. 레이스...

Dirty-Frag-Analysis

Analyse technique approfondie de Dirty Frag CVE-2026-43284 xfrm-ESP / CVE-2026-43500 RxRPC Vulnérabilité d'élévation de privilèges du noyau Linux — Rétro-ingénierie du PoC · Analyse du shellcode · Principe du correctif · Script de détection Aperçu de la vulnérabilité Dirty Frag exploite en chaîne...

Paranoid-Dirty-Frag-CVE-2026-43284

Script d'atténuation Dirty Frag Ce script : 1. Bloque le chargement des modules noyau vulnérables 2. Les décharge s'ils sont actuellement actifs 3. Vérifie l'état de l'atténuation AVERTISSEMENT : Désactive la prise en charge IPsec ESP de Linux esp4/esp6 et la prise en charge RxRPC...

CVE-2026-43284

🚨 CVE-2026-43284 — Dirty Frag 🚨 Escalade locale de privilèges universelle du noyau Linux Aperçu Champ| Détail ---|--- CVE| CVE-2026-43284 xfrm/ESP + CVE-2026-43500 RxRPC Surnom| Dirty Frag CVSS| 7.8 HAUTE Type| Élévation locale de privilèges LPE Introduit| Noyau Linux 4.10 2017, commit cac2661c53...

DirtyFrag-go

dirtyfrag-go Deux bugs. Un shell. Aucune écriture disque. Portage Go de dirtyfrag CVE-2026-43284 / CVE-2026-43500. Comment ça marche tl;dr La classe de bug se trouve dans le sous-système XFRM du noyau Linux. Lorsqu'une page de fichier est spliceée dans un pipe puis dans un socket chiffré ESP, le...

CVE-2026-31635-DirtyDecrypt

CVE-2026-31635 · DirtyDecrypt تصعيد صلاحيات محلي في لينكس عبر مسار فك تشفير RxRPC/GSSAPI. يؤدي التحقق المفقود لـ skbcowdata في rxgkdecryptskb إلى السماح لمهاجم محلي غير ممتاز بإفساد صفحات ذاكرة التخزين المؤقت للصفحات page cache واستبدال محتويات الذاكرة للملفات المقروءة فقط. المحتويات نظرة عامة...

CVE-2026-43284

Dirty Frag: LPE universale su Linux Sommario Questo documento spiega la classe di vulnerabilità Dirty Frag, scoperta e segnalata da Hyunwoo Kim @v4bel. Combinando xfrm-ESP Page-Cache Write CVE-2026-43284 con RxRPC Page-Cache Write CVE-2026-43500, un attaccante può elevare i propri privilegi a roo...

The vulnerability of the rxrpc_preparse_xdr_yfs_rxgk() function in the net/rxrpc/key.c module, which is part of the RxRPC session support in the Linux operating system’s kernel, allows a attacker to cause a service failure.

The vulnerability of the rxrpcpreparsexdryfsrxgk function in the net/rxrpc/key.c module, which is part of the RxRPC session support in the Linux operating system’s kernel, involves the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an...

VulnCheck KEV: CVE-2026-31635

In the Linux kernel, the following vulnerability has been resolved: rxrpc: fix oversized RESPONSE authenticator length check rxgkverifyresponse decodes authlen from the packet and is supposed to verify that it fits in the remaining bytes. The existing check is inverted, so oversized RESPONSE...

The vulnerability of the rxrpc_process_event() function in the net/rxrpc/conn_event.c module allows for a session-based RxRPC kernel support on Linux systems. This enables a hacker to cause a service failure.

The vulnerability of the rxrpcprocessevent function in the net/rxrpc/connevent.c module, which supports RxRPC session sockets in Linux operating systems, is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the rxgk_verify_response() function in the net/rxrpc/rxgk.c module allows attackers to compromise the confidentiality, integrity, and accessibility of protected information within the RxRPC session support of the Linux operating system’s kernel.

The vulnerability of the rxgkverifyresponse function in the net/rxrpc/rxgk.c module, which is part of the RxRPC session support for Linux kernel sockets, involves a numerical overflow vulnerability. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

The vulnerability of the rxrpc_recvmsg() function in the net/rxrpc/recvmsg.c module, which supports RxRPC session sockets in Linux kernels, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rxrpcrecvmsg function in the net/rxrpc/recvmsg.c module, which supports RxRPC session sockets in Linux kernels, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerability of the rxgk_verify_authenticator() function in the net/rxrpc/rxgk.c module allows attackers to access protected information or cause service failures under Linux operating system kernels.

The vulnerability of the rxgkverifyauthenticator function in the net/rxrpc/rxgk.c module relates to the execution of operations outside the buffer in the memory of the Linux operating system’s kernel. Exploiting this vulnerability could allow a remote attacker to gain access to protected...

The vulnerability of the rxrpc_input_packet_on_conn() function in the net/rxrpc/io_thread.c module, which is part of the RxRPC session support for Linux kernel, allows a attacker to cause a service failure.

The vulnerability of the rxrpcinputpacketonconn function in the net/rxrpc/iothread.c module, which supports RxRPC session sockets in Linux kernels, is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause service failures...