dirtyfrag-patches

Dirty Frag — 커널 패치 Hyunwoo Kim @v4bel이 발견한 Dirty Frag 취약점 클래스에 대한 패치 시리즈입니다. Dirty Frag는 권한이 없는 로컬 사용자가 읽기 전용 파일예: /usr/bin/su, /etc/passwd의 페이지 캐시의 임의 바이트를 덮어쓸 수 있게 하여, 모든 주요 Linux 배포판에서 루트로의 로컬 권한 상승 을 초래합니다. ⚠️ 저작자 표기 이 저장소의 패치는 이 저장소의 관리자가 작성한 것이 아닙니다. CVE-2026-43284 ESP 패치: Hyunwoo Kim @v4bel...

dirty_frag_mitigation

dirtyfragmitigation 1. 一个用于缓解 Linux dirty frag 漏洞（CVE-2026-43500）的 Bash 脚本 2. 适用于所有基于 Debian/Ubuntu Arch 的平台，即 Kali、ParrotSec、BlackArch 3. 添加了 --check 参数，允许非 root 用户运行。同时增加了对 fragnesia 的支持，因为它与 dirtyfrag 共享相同的补丁表面。 使用示例： root@kitploit: ᐅ dirtyfragfix.sh --check Checking dirtyfrag mitigation statu...

Photon OS 5.0: Linux PHSA-2026-5.0-91-0864

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0864. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

AlmaLinux 10 : kernel (ALSA-2026:47017)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:47017 advisory. kernel: net: bridge: use a stable FDB dst snapshot in RCU readers CVE-2026-46086 kernel: ipv6: fix possible UAF in icmpv6rcv CVE-2026-53006 kernel: tipc...

RockyLinux 10 : kernel (RLSA-2026:47017)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:47017 advisory. kernel: net: bridge: use a stable FDB dst snapshot in RCU readers CVE-2026-46086 kernel: ipv6: fix possible UAF in icmpv6rcv CVE-2026-53006 kernel: tip...

dirtyfrag

Dirty Frag: Universal Linux LPE Abstract !tuxasse...

EUVD-2026-45599

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix DATA decrypt vs splice by copying data to buffer in recvmsg This improves the fix for CVE-2026-43500. Fix the pagecache corruption from in-place decryption of a DATA packet transmitted locally by splice by getting rid ...

USN-8426-1 linux-azure-5.15, linux-azure-fips vulnerabilities

It was discovered that the Linux kernel algifaead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. CVE-2026-31431 It was discovered that the Linux kernel did n...

Exploit for Write-what-where Condition in Linux Linux_Kernel

CVE-2...

Metasploit Wrap Up 05/29/2026

More Linux LPEs Hark the age of the Linux LPE has arrived. This week’s release follows up on recent work bringing new Linux LPEs to Metasploit users. Copy Fail seemed to have kicked off a trend of similar bugs and hot on its heels is Dirty Frag. Dirty Frag is actually two vulnerabilities in a...

Important: kernel-livepatch-6.12.83-113.160

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb frags "Dirty Frag" and other issues in Amazon Linux kernels: https://aws.amazon.com/security/security-bulletins/2026-027-aws/ CVE-2026-43284 In the Linux kernel, the...

SUSE SLES15 Security Update : kernel (SUSE-SU-2026:1907-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1907-1 advisory. The SUSE Linux Enterprise 15 SP5 kernel was updated to fix the following issue: Security issues fixed: - CVE-2026-43284: xfrm: esp:...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to fix the following issue: Security issues fixed: CVE-2026-43284: xfrm: esp: avoid in-place decrypt on shared skb frags bsc1264449. CVE-2026-43500: rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present bsc1264450. CVE-2025-5451...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues The following security issues were fixed: CVE-2025-54518: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache bsc1264013. CVE-2026-46300: net: skbuff: propagate shared-frag marker...

SUSE-SU-2026:1900-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-54518: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache bsc1264013. - CVE-2026-46300: net: skbuff: propagate shared-frag marker...

CVE-2026-43500 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-qemu, linux-aws, linux-azure, linux-qemu-rc, linux-vmware, linux-qemu-melange...

SUSE SLES16 Security Update : kernel (SUSE-SU-2026:21610-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:21610-1 advisory. The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: Dirty...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix the following issue: CVE-2026-43284: xfrm: esp: avoid in-place decrypt on shared skb frags bsc1264449. CVE-2026-43500: rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present bsc1264450. Special Instructions and Notes: Plea...

OPENSUSE-SU-2026:20743-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: Dirty Frag fixes: - CVE-2026-43500: supported.conf: drop rxrpc completely bsc1264450 - CVE-2026-43284: xfrm: esp: avoid in-place decrypt on shared skb frags bsc1264449...

SUSE-SU-2026:21610-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: Dirty Frag fixes: - CVE-2026-43500: supported.conf: drop rxrpc completely bsc1264450 - CVE-2026-43284: xfrm: esp: avoid in-place decrypt on shared skb frags bsc1264449...