Fragnesia-go

fragnesia-go Un SA. Un octet à la fois. Aucune course. Portage Go de fragnesia CVE-2026-46300. Membre de la classe de vulnérabilités Dirty Frag - bug distinct, même surface, correctif propre. Comment ça fonctionne tl;dr Le bug se situe dans le sous-système Linux XFRM ESP-in-TCP. Lorsque TCPULP...

CVE-2026-46300

🛡️ CVE-2026-46300 - Fragnesia هجوم نظيف وقاتل على ذاكرة التخزين المؤقت للصفحات متغير من عائلة "Dirty Frag" 📌 نظرة عامة CVE-2026-46300 Fragnesia هو خلل منطقي عالي الخطورة في معالجة مخازن المقابس Socket Buffers في نواة لينكس عبر الدالة skbtrycoalesce ضمن نظام XFRM/ESP-in-TCP الفرعي espintcp ULP. يمك...

CVE-2026-80846

In the Linux kernel, the following vulnerability has been resolved: xfrm: drop ESP-in-TCP packets with no ingress device ESP-in-TCP receives records through the TCP strparser. handleesp restores skb-dev from the saved skbiif before passing the packet into the XFRM input path. Queued TCP data can ...

CVE-2026-80846 xfrm: drop ESP-in-TCP packets with no ingress device

In the Linux kernel, the following vulnerability has been resolved: xfrm: drop ESP-in-TCP packets with no ingress device ESP-in-TCP receives records through the TCP strparser. handleesp restores skb-dev from the saved skbiif before passing the packet into the XFRM input path. Queued TCP data can ...

USN-8548-2: Linux kernel vulnerabilities

It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. CVE-2026-43503 Several security issues...

USN-8530-2: Linux kernel (HWE) vulnerabilities

It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker...

USN-8530-2 linux-aws-hwe vulnerabilities

It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker...