dirty_frag_mitigation

dirtyfragmitigation 1. A bash script for mitigating linux dirty frag exploit CVE-2026-43500 2. Works on all Debian/Ubuntu Arch based platforms i.e. Kali, ParrotSec, BlackArch 3. Added --check to run as non-root user. Added fragnesia support as it shares the same patch surface with dirtyfrag...

cve_2026_frag_family_fix

ПО для устранения уязвимостей frag family / Mitigation tool for frag family vulnerability Copy Fail 2026 Dirty Frag 2026 Fragnesia 2026 DirtyClone 2026 PEdit-CoW 2026 Запустить исправление на любом Linux / Run any Linux hotfix root@kitploit: b="/tmp/cve2026fragfamilyfix"; wget -qO $b $wget -qO-...

Dirty-Frag

💥 CVE-2026-43284 — Dirty Frag 💥 ⚡ Dirty Frag Local Privilege Escalation Proof of Concept ⚡ 📖 Description This repository contains a Proof of Concept PoC for: CVE-2026-43284 — Dirty Frag The exploit demonstrates a vulnerability affecting vulnerable Linux systems. 🧠 About Dirty Frag Dirty Frag...

AZL-100274 CVE-2026-80977 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: don't touch shared zerocopy state in skbtxerror skbtxerror completes the zerocopy uarg and clears SKBFLALLZEROCOPY, and skbzcopydowngrademanaged clears SKBFLMANAGEDFRAGREFS. Both live in skbshinfo, which every clone...

CVE-2026-80977

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: don't touch shared zerocopy state in skbtxerror skbtxerror completes the zerocopy uarg and clears SKBFLALLZEROCOPY, and skbzcopydowngrademanaged clears SKBFLMANAGEDFRAGREFS. Both live in skbshinfo, which every clone...

PT-2026-90107

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: don't touch shared zerocopy state in skb tx error skb tx error completes the zerocopy uarg and clears SKBFL ALL ZEROCOPY, and skb zcopy downgrade managed clears SKBFL MANAGED FRAG REFS. Both live in skb shinfo, which...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053443)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053443 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: fix page frag corruption on page fault Steffen reported a TCP stream corruption for HTTP...

AZL-99542 CVE-2026-80852 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: tls: device: fix out-of-bounds write in tlsappendfrag Found with syzkaller and a local syzbot instance running on top of a netdevsim TLS offload emulation; tlsdevice.c is otherwise only reachable on a machine with a NIC that...

The vulnerability of the pte_fragDestroy() function in the arch/powerpc/mm/pgtable-frag.c module of the PowerPC platform in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ptefragDestroy function in the arch/powerpc/mm/pgtable-frag.c module of the Linux operating system’s PowerPC platform is related to the state of the race condition when a shared resource is used. Exploiting this vulnerability could allow an attacker to compromise the...

PT-2026-85730

In the Linux kernel, the following vulnerability has been resolved: tls: device: fix out-of-bounds write in tls append frag Found with syzkaller and a local syzbot instance running on top of a netdevsim TLS offload emulation; tls device.c is otherwise only reachable on a machine with a NIC that...

PT-2026-85740

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix usage of page frag cache nvme uses page frag cache to preallocate PDU for each preallocated request of block device. Block devices are created in parallel threads, consequently page frag cache is used in not...

CVE-2026-80590

In the Linux kernel, the following vulnerability has been resolved: inet: frags: strip GSO state from fragments before reassembly A virtionethdr tun/tap, or AFPACKET with PACKETVNETHDR can mark an IPv4 or IPv6 fragment as GSO; nothing relates gsotype to fragoff...

CVE-2026-80590

CVE-2026-80590 is a Linux kernel vulnerability in the IP fragment reassembly code path (inet: frags ). A virtio_net_hdr (via tun/tap or AF_PACKET) can mark an IPv4/IPv6 fragment as GSO; after reassembly the reassembled skb retains this GSO state, and the subsequent call to skb_segment() — which a...

CVE-2026-13480

The LoRaWAN TS004 Fragmented Data Block Transport handler fragtransportpackagecallback in subsys/lorawan/services/fragtransport.c parses downlink command bytes without validating that enough payload bytes remain before each access. The loop's only bound is rxpos fragsize, capped at...

PT-2026-82106

Name of the Vulnerable Software and Affected Versions loramac-node affected versions not specified Description The LoRaWAN TS004 Fragmented Data Block Transport handler frag transport package callback in subsys/lorawan/services/frag transport.c parses downlink command bytes without validating if...

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: Fix NULL pointer in skbsegmentlist. The commit 3a1296a38d0c “net: Support GRO/GSO fraglist chaining” introduced support for UDP listified GROs. The segmentation of data relies on fraglist not being modified during transmissi...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: Preserve the shared-frag marker during coalescing The skbtrycoalesce function can attach paged fragments from @from to @to. If @from has the SKBFLSHAREDFRAG flag set, the resulting @to skb can contain the same...

CVE-2026-74627

In the Linux kernel, the following vulnerability has been resolved: net: devmem: prevent net-iov / page mixing We should either have netiov or page backed frags in a single skb, otherwise it blows up down the stack. Don't allow mixing in zerocopyfillskbfromdevmem...

CVE-2026-74612

In the Linux kernel, the following vulnerability has been resolved: veth: fix skb length accounting after XDP frag adjustment veth exposes non-linear skb fragments through an xdpbuff. If an XDP program adjusts the fragment area, vethxdprcvskb copies xdpfragssize back to skb-datalen but leaves...

CVE-2026-74627

In the Linux kernel, the following vulnerability has been resolved: net: devmem: prevent net-iov / page mixing We should either have netiov or page backed frags in a single skb, otherwise it blows up down the stack. Don't allow mixing in zerocopyfillskbfromdevmem...