657 matches found
SG-2026-0024
Dirty Frag primitive-only PoC Readable N4C demonstrator for CVE-2026-43284 XFRM/ESP and CVE-2026-43500 RxRPC/RXKAD. The PoC answers one question: can an unprivileged process change the page cache of a root-owned, read-only file through a sharedskbuff fragment? It does not overwrite /usr/bin/su or...
PinTheft-go
pintheft-go Go port of pintheft - RDS zcopy double-free LPE. Member of the Dirty Frag vulnerability class. !IMPORTANT Arch Linux is one of the most exposed distributions for this vulnerability, as it is among the few where the RDS module can typically be loaded by default. How it works tl;dr The...
CVE-2026-43284
🚨 CVE-2026-43284 — Dirty Frag 🚨 Escalade locale de privilèges universelle du noyau Linux Aperçu Champ| Détail ---|--- CVE| CVE-2026-43284 xfrm/ESP + CVE-2026-43500 RxRPC Surnom| Dirty Frag CVSS| 7.8 HAUTE Type| Élévation locale de privilèges LPE Introduit| Noyau Linux 4.10 2017, commit cac2661c53...
Fragnesia-go
fragnesia-go One SA. One byte at a time. No race. Go port of fragnesia CVE-2026-46300. Member of the Dirty Frag vulnerability class - separate bug, same surface, own patch. How it works tl;dr The bug is in the Linux XFRM ESP-in-TCP subsystem. When TCPULP espintcp is installed on a socket after da...
CVE-2026-43284---DirtyFrag-Analysis-THM-
TryHackMe — CVE-2026-43284: Dirty Frag Room: CVE-2026-43284: Dirty Frag Category: Linux Privilege Escalation Author: My Page Overview Dirty Frag is a chained Linux local privilege escalation LPE room built around CVE-2026-43284. The goal is to go from an unprivileged shell to root by exploiting a...
Reporte-de-Escalada-de-Privilegios-Local-Dirty-Frag
Reporte de Escalada de Privilegios Local — Dirty Frag Estudiante: Jonatan Claudio 1. Requerimientos Resumen de la metodología Se realizó una evaluación de vulnerabilidades sobre una máquina virtual con Kali Linux utilizando un script detector para la vulnerabilidad Dirty Frag, asociada a las...
CVE-2026-43500
Este proyecto se ha movido a https://github.com/First-John/cve2026fragfamilyfix...
CVE-2026-43284
Dirty Frag — kernel page-cache write tracking site Source for the Dirty Frag patch-status tracker: a single-page site recording which distributions have shipped a fix for the paired page-cache write privilege-escalation chain in the Linux kernel. Where the facts live Everything about the bug — CV...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: TCP: fixed page frag corruption upon a page fault. Steffen reported a corruption of the TCP stream for HTTP requests served by the Apache web-server, using a CIFS mount-point and the corresponding file’s memory mapping. The root...
Astra Linux – Vulnerability in Linux
In the Linux kernel, the following vulnerability has been resolved: tipc: skblinearize the head skb when reassembling msgs It’s not a good idea to append the frag skb to a skb’s fraglist if the fraglist already contains skbs from elsewhere. For example, this frag skb was created by pskbcopy, wher...
Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: net: prevented skb corruption during frag list segmentation. Ian reported several instances of skb corruption triggered by rx-gro-list, resulting in similar errors: 62.624003 BUG: kernel NULL pointer dereference, address:...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: net: fix udp gsoskbSegment after pulling from fragList The commit a1e40ac5b5e9 “net: gso: fix udp gso fragList segmentation after pulling from fragList” detected invalid geometries in the fragList skbSegments and redirected them...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: ipv4: The need to account for “fraggap” on the paged allocation path. In ipappenddata, when the paged-allocation branch is taken, alloclen and pagedlen are calculated as follows: alloclen = fragheaderlen + transhdrlen; pagedlen =...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: net: skbuff: The SKBFLSHAREDFRAG bit was not properly propagated through the frag-transfer helpers. Two frag-transfer helpers pskbcopyfclone and skbshift fail to propagate the SKBFLSHAREDFRAG bit in skbshinfo-flags when moving...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: Net: Fixing segmentation issues with forwarding fraglists for GRO packets This patch improves the handling of GSO segmentation by properly checking the SKBGSODODGY flag for GSO packets with a fraglist. This addresses low throughp...
DIRTY-FRAG-Detection-with-Wazuh-4.14.4
Detección de DIRTY FRAG con Wazuh 4.14.4 - CVE-2026-43284 / CVE-2026-43500 Ingeniería de detección para la LPE del kernel Dirty Frag - Ubuntu / RHEL / Debian / Amazon Linux ¿Qué es Dirty Frag? CVE-2026-43284 / CVE-2026-43500 es una escalada de privilegios local LPE del kernel de Linux que encaden...
CVE-2026-43284
Dirty Frag - kernel Linux critical Vulnerability- CVE-2026-43284 📚 Introduction The exploit chain, classified as a Local Privilege Escalation LPE , allows an unprivileged user to obtain root access on virtually all modern Linux distributions running kernels released since 2017, spanning...
CVE-2026-43284-Dirty-Frag
CVE-2026-43284 Dirty Frag Exploit precompilado para CVE-2026-43284 Dirty Frag. Código fuente original de V4bel/dirtyfrag. Compilación root@kitploit: make glibc static build make zig-musl-static ZIGTARGET=x8664-linux-musl musl static build Descarga Descargue los binarios precompilados desde...
CVE-2026-43284
Dirty Frag: Universal Linux LPE Abstract This document explains the Dirty Frag vulnerability class, discovered and reported by Hyunwoo Kim @v4bel. By chaining xfrm-ESP Page-Cache Write CVE-2026-43284 with RxRPC Page-Cache Write CVE-2026-43500, an attacker can escalate to root on major Linux...