Linux Distros Unpatched Vulnerability : CVE-2026-80843

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfrm: fix xfrmstateconstruct auth-trunc leak attachauthtrunc can allocate x-aalg while leaving x-props.aalgo at zero when the selected auth algorithm has no...

Linux Distros Unpatched Vulnerability : CVE-2026-80848

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfrm: espintcp: fix UAF during close ZDI reported and analyzed a race condition during close for espintcp sockets: espintcpclose frees emsg-skb via kfreeskb...

Linux Distros Unpatched Vulnerability : CVE-2026-80846

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfrm: drop ESP-in-TCP packets with no ingress device ESP-in-TCP receives records through the TCP strparser. handleesp restores skb-dev from the saved skbiif...

DirtyFrag-for-dummies

Dirty Frag / CVE-2026-43284 — 研究笔记 概述 该仓库包含一个经过清理的技术示意图和辅助笔记，用于描述通常被称为 Dirty Frag 且针对 xfrm-ESP 路径被追踪为 CVE-2026-43284 的 Linux 内核漏洞。 该问题属于由 Hyunwoo Kim（@v4bel）发现的更广泛的 Dirty Frag 类别。一个相关的 RxRPC 变体被单独追踪为 CVE-2026-43500 。 本材料的目的是： 在系统层面解释漏洞机制； 记录 XFRM ESP、UDP 封装、splice、skb 片段、文件支持页以及页缓存损坏之间的关系；...

CVE-2026-43284-dirtyfrag-detection

DirtyFrag CVE-2026-43284 Validación de PoC y Detección con auditd Alcance: Validación de escalada local de privilegios LPE en Linux centrada en la ruta XFRM/ESP asociada con CVE-2026-43284. Este repositorio contiene un informe en inglés y artefactos de evidencia de una validación controlada en...

CVE-2026-31431

CopyFail2 CVE-2026-31431 - Implementación en Python Puerto en Python del exploit de kernel CopyFail2 que aprovecha la ruta rápida sin copy-on-write de MSGSPLICEPAGES en xfrm ESP-in-UDP para la escalada local de privilegios en Linux sin privilegios. Reemplaza una entrada nologin/false en /etc/pass...

yc-mk8s-copy-fail-mitigation

Mitigación de Copy Fail / Dirty Frag para Yandex Managed Kubernetes Aplicación automática de la mitigación para las vulnerabilidades CVE-2026-31431, CVE-2026-43284 y CVE-2026-43500 en el kernel de Linux en todos los worker-nodes del clúster Yandex Managed Kubernetes. Descripción de la...

Dirty-Frag-Kubernetes-PoC

Dirty Frag CVE-2026-43284 — PoC de Escape de Contenedor en Kubernetes Una prueba de concepto que demuestra cómo un Pod de Kubernetes predeterminado y sin privilegios puede lograr ejecución de código a nivel de nodo en Amazon EKS explotando la vulnerabilidad de corrupción de caché de páginas del...

Dirty-Frag-Analysis

Análisis técnico en profundidad de Dirty Frag CVE-2026-43284 xfrm-ESP / CVE-2026-43500 RxRPC Vulnerabilidades de escalada de privilegios locales en el kernel de Linux — Reversing del PoC · Desglose del shellcode · Principios del parche · Script de detección Resumen de la vulnerabilidad Dirty Frag...

CVE-2026-43284

🚨 CVE-2026-43284 — Dirty Frag 🚨 Escalada local de privilegios universal en el kernel de Linux Resumen Campo| Detalle ---|--- CVE| CVE-2026-43284 xfrm/ESP + CVE-2026-43500 RxRPC Apodo| Dirty Frag CVSS| 7.8 HIGH Tipo| Escalada local de privilegios LPE Introducido| kernel de Linux 4.10 2017, commit...

XCP_ng_CVE-2026-43284_tester

Diagnóstico de Dirty Frag para XCP-ng — CVE-2026-43284 Una herramienta de diagnóstico comunitaria para determinar si un host dom0 de XCP-ng está expuesto a CVE-2026-43284 "Dirty Frag", una vulnerabilidad de escalada de privilegios local en el subsistema xfrm-ESP del kernel de Linux. TL;DR — Todas...

DirtyFrag-go

dirtyfrag-go Dos bugs. Una shell. Sin escrituras en disco. Puerto en Go de dirtyfrag CVE-2026-43284 / CVE-2026-43500. Cómo funciona tl;dr La clase de bug está en el subsistema XFRM del kernel de Linux. Cuando una página de archivo se pasa con splice a un pipe y luego a un socket cifrado con ESP, ...

Fragnesia-go

fragnesia-go Una SA. Un byte a la vez. Sin condiciones de carrera. Implementación en Go de fragnesia CVE-2026-46300. Miembro de la clase de vulnerabilidades Dirty Frag: error distinto, misma superficie, parche propio. Cómo funciona tl;dr El fallo está en el subsistema XFRM ESP-in-TCP de Linux...

CVE-2025-39965

DISCLAIMER All content provided is for educational and research purposes only. All testing was conducted exclusively on an Linux Kernel Emulator, in a safe, isolated environment. No production systems or devices owned by others were involved or affected during this research. The author assumes no...

The vulnerability of the nat_keepalive_send() function in the xfrm component of the Linux operating system allows a hacker to execute arbitrary code.

The vulnerability of the natkeepalivesend function in the xfrm component of the Linux operating system’s kernel is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098987)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098987 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: delete x-tunnel as we delete x The ipcomp fallback tunnels currently get deleted from the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098996)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098996 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: ah: account for ESN high bits in async callbacks AH allocates its temporary auth/ICV layout...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098981)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098981 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: clear trailing padding in buildpolexpire buildexpire clears the trailing padding bytes of...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098861)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098861 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: fix iprtbug race in icmproutelookup reverse path icmproutelookup performs multiple route...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098811)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098811 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: always flush state and policy upon NETDEVUNREGISTER event syzbot is reporting that struct...