dirty_frag_mitigation

dirtyfragmitigation 1. 一个用于缓解 Linux dirty frag 漏洞（CVE-2026-43500）的 Bash 脚本 2. 适用于所有基于 Debian/Ubuntu Arch 的平台，即 Kali、ParrotSec、BlackArch 3. 添加了 --check 参数，允许非 root 用户运行。同时增加了对 fragnesia 的支持，因为它与 dirtyfrag 共享相同的补丁表面。 使用示例： root@kitploit: ᐅ dirtyfragfix.sh --check Checking dirtyfrag mitigation statu...

CVE-2024-33453

CVE-2024-33453 Sensitive Data Exposure via Object Level Access Control in esp-idf Description A Buffer Overflow vulnerability in the esp-idf framework version 5.1, used by some Schoolbox products, allows a remote attacker to obtain sensitive information through improper object-level access contro...

CVE-2025-5548

Exploitation Lab - CVE-2025-5548 FreeFloat FTP Repository for a controlled exploitation lab of CVE-2025-5548 on FreeFloat FTP Server, running on Windows inside an isolated VM. The project is divided into two blocks: Environment/: environment setup tools, IDEs, debugger, disassembler, and vulnerab...

SUSE CVE-2026-80846

In the Linux kernel, the following vulnerability has been resolved: xfrm: drop ESP-in-TCP packets with no ingress device ESP-in-TCP receives records through the TCP strparser. handleesp restores skb-dev from the saved skbiif before passing the packet into the XFRM input path. Queued TCP data can ...

AZL-99431 CVE-2026-80846 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: xfrm: drop ESP-in-TCP packets with no ingress device ESP-in-TCP receives records through the TCP strparser. handleesp restores skb-dev from the saved skbiif before passing the packet into the XFRM input path. Queued TCP data can ...

CVE-2026-80846

In the Linux kernel, the following vulnerability has been resolved: xfrm: drop ESP-in-TCP packets with no ingress device ESP-in-TCP receives records through the TCP strparser. handleesp restores skb-dev from the saved skbiif before passing the packet into the XFRM input path. Queued TCP data can ...

CVE-2026-80846 xfrm: drop ESP-in-TCP packets with no ingress device

In the Linux kernel, the following vulnerability has been resolved: xfrm: drop ESP-in-TCP packets with no ingress device ESP-in-TCP receives records through the TCP strparser. handleesp restores skb-dev from the saved skbiif before passing the packet into the XFRM input path. Queued TCP data can ...

EUVD-2026-71296

In the Linux kernel, the following vulnerability has been resolved: xfrm: drop ESP-in-TCP packets with no ingress device ESP-in-TCP receives records through the TCP strparser. handleesp restores skb-dev from the saved skbiif before passing the packet into the XFRM input path. Queued TCP data can ...

CVE-2026-80846

CVE-2026-80846 is a NULL pointer dereference in the Linux kernel affecting the XFRM ESP-in-TCP path. When queued TCP data is processed after the original ingress device has been removed (e.g., during veth or network namespace teardown), handle_esp() restores skb->dev from the saved skb_iif, bu...

Linux Distros Unpatched Vulnerability : CVE-2026-80846

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfrm: drop ESP-in-TCP packets with no ingress device ESP-in-TCP receives records through the TCP strparser. handleesp restores skb-dev from the saved skbiif...

DirtyFrag-for-dummies

Dirty Frag / CVE-2026-43284 — Research Notes Overview This repository contains a cleaned-up technical diagram and supporting notes for the Linux kernel vulnerability commonly referred to as Dirty Frag and tracked for the xfrm-ESP path as CVE-2026-43284. The issue belongs to the broader Dirty Frag...

CVE-2026-43284-dirtyfrag-detection

DirtyFrag CVE-2026-43284 PoC Validation and auditd Detection Scope: Linux Local Privilege Escalation LPE validation focused on the XFRM/ESP path associated with CVE-2026-43284. This repository contains an English report and evidence artifacts from a controlled laboratory validation of the public...

CVE-2026-31431

CopyFail2 CVE-2026-31431 - Python Implementation Python port of the CopyFail2 kernel exploit leveraging xfrm ESP-in-UDP MSGSPLICEPAGES no-COW fast path for unprivileged Linux local privilege escalation. Replaces a nologin/false entry in /etc/passwd with a passwordless uid-0 user and drops into a...

yc-mk8s-copy-fail-mitigation

Copy Fail / Dirty Frag 缓解措施（适用于 Yandex Managed Kubernetes） 自动为 Yandex Managed Kubernetes 集群的所有 worker 节点应用针对 Linux 内核漏洞 CVE-2026-31431、CVE-2026-43284 和 CVE-2026-43500 的缓解措施。 漏洞描述 CVE 标识符（CVE ID）： CVE-2026-43284、CVE-2026-43500 CVE 链接： https://nvd.nist.gov/vuln/detail/CVE-2026-43284 原始报告： Dirty...

DirtyFrag-Detector

🔍 Dirty Frag — CVE-2026-43284 / CVE-2026-43500 检测脚本 TL;DR: 存在两个新的 Linux 内核漏洞。此脚本可判断您是否易受攻击。请及时修补系统。 这是什么？ 2026 年 5 月 7 日，安全研究员 Hyunwoo Kim（@v4bel）提前公开披露了一类名为 Dirty Frag 的漏洞——由于保密协议被第三方打破，他不得不在补丁就绪之前发布。 该漏洞允许任何非特权本地用户获取 root 权限。无需竞态条件，无需时间窗口，可靠性极高。 受影响的两个子系统如下： CVE| 子系统| 模块| 引入时间| 修复（上游）...

Dirty-Frag-Kubernetes-PoC

Dirty Frag CVE-2026-43284 — PoC de Escape de Contenedor en Kubernetes Una prueba de concepto que demuestra cómo un Pod de Kubernetes predeterminado y sin privilegios puede lograr ejecución de código a nivel de nodo en Amazon EKS explotando la vulnerabilidad de corrupción de caché de páginas del...

Dirty-Frag-Analysis

Análisis técnico en profundidad de Dirty Frag CVE-2026-43284 xfrm-ESP / CVE-2026-43500 RxRPC Vulnerabilidades de escalada de privilegios locales en el kernel de Linux — Reversing del PoC · Desglose del shellcode · Principios del parche · Script de detección Resumen de la vulnerabilidad Dirty Frag...

Paranoid-Dirty-Frag-CVE-2026-43284

Dirty Frag 缓解脚本 此脚本： 1. 阻止易受攻击的内核模块加载 2. 如果当前处于活动状态，则将其卸载 3. 验证缓解状态 警告： 禁用 Linux IPsec ESP 支持（esp4/esp6） 以及 RxRPC 支持。 这可能会破坏： - strongSwan - libreswan - 某些企业 VPN - AFS/RxRPC 服务...

CVE-2026-43284

🚨 CVE-2026-43284 — Dirty Frag 🚨 Universal Linux Kernel Local Privilege Escalation Overview Field| Detail ---|--- CVE| CVE-2026-43284 xfrm/ESP + CVE-2026-43500 RxRPC Nickname| Dirty Frag CVSS| 7.8 HIGH Type| Local Privilege Escalation LPE Introduced| Linux kernel 4.10 2017, commit cac2661c53f3...

XCP_ng_CVE-2026-43284_tester

XCP-ng Dirty Frag Diagnostic — CVE-2026-43284 A community diagnostic tool to determine whether an XCP-ng dom0 host is exposed to CVE-2026-43284 "Dirty Frag", a local privilege escalation vulnerability in the Linux kernel's xfrm-ESP subsystem. TL;DR — All current XCP-ng releases 8.1, 8.2, 8.3...