Fragnesia-go

fragnesia-go SA1つ。一度に1バイト。レースなし。 fragnesia（CVE-2026-46300）のGo移植版です。Dirty Frag脆弱性クラスの一員 - 別のバグ、同じ攻撃面、独自のパッチ。 動作の仕組み tl;dr このバグはLinux XFRM ESP-in-TCPサブシステムに存在します。ファイルからTCP受信キューへデータがspliceされた後、ソケットにTCPULP...

Rocky Linux 10.2 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_19569)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202619569 advisory. kernel: net: afcan: do not leave a dangling sk pointer in cancreate CVE-2024-56603 kernel: net/sched: Make cakeenqueue return NETXMITCN when past...

Rocky Linux 8 [CIQ] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (crlsa-2026_19666)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202619666 advisory. kernel: Fragnesia is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation LPE vulnerability in the Linux kernel...

Rocky Linux 8 [CIQ] Security Update: kernel-rt-debug-debuginfo / kernel-rt-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_19664)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202619664 advisory. kernel: Fragnesia is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation LPE vulnerability in the Linux kernel...

CVE-2026-46300

CVE-KERNEL · LinuxカーネルLPEチェーン Linuxカーネルの脆弱性に対するマルチCVEローカル権限昇格チェーン uid=1000 → root（xfrm-ESP、RxRPC、Fragnesiaのページキャッシュ書き込み経由） 概要 CVE-KERNEL は、複数のLinuxカーネルCVEを連鎖させ、非特権ユーザーからrootへ権限昇格するPythonベースのローカル権限昇格（LPE）ツールです。このエクスプロイトは、カーネルのネットワークサブシステムを通じてページキャッシュ破壊プリミティブを狙います。 MadExploitsによる改変 —...

ansible-mitigate-copyfail-dirtyfrag

CopyFail、DirtyFrag、Fragnesia 脆弱性を緩和するためのAnsibleプレイブック シンプルかつ効果的なAnsibleプレイブックを使用して、LinuxカーネルにおけるCopyFail（CVE-2026-31431）、DirtyFrag（CVE-2026-43284）、Fragnesia（CVE-2026-46300）の脆弱性を緩和します。 このAnsibleプレイブックを使用して、サーバーまたはグループに対して実行します。target 追加変数オプションは、Ansibleインベントリのホストまたはグループエントリと共に使用するものです。 例：...

Fragnesia

ローカル権限昇格 CVE-2026-46300 使用方法： CGOENABLED=0 go build -ldflags="-s -w" -o fragnesia . ./fragnesia 影響を受けるバージョン: Ubuntu 16.04 LTS RHEL 8,9 Rocky Linux 8,9,10 CentOS Stream 8,9,10 Oracle Linux 8,9 openEuler 20.03-LTS-SP4 22.03-LTS-SP3 22.03-LTS-SP4 24.03-LTS 24.03-LTS-SP1 24.03-LTS-SP2 24.03-LTS-SP3...

Linux Distros Unpatched Vulnerability : CVE-2026-89487

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - openvswitch: only skbtxerror a packet we are about to drop queueuserspacepacket borrows the packet skb -- it only copies it into a private netlink message users...

AZL-100568 CVE-2026-89487 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: openvswitch: only skbtxerror a packet we are about to drop queueuserspacepacket borrows the packet skb -- it only copies it into a private netlink message userskb and does not own it; on return doexecuteactions keeps forwarding i...

EUVD-2026-76393

In the Linux kernel, the following vulnerability has been resolved: openvswitch: only skbtxerror a packet we are about to drop queueuserspacepacket borrows the packet skb -- it only copies it into a private netlink message userskb and does not own it; on return doexecuteactions keeps forwarding i...

CVE-2026-89487: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: openvswitch: only skbtxerror a packet we are about to drop queueuserspacepacket borrows the packet skb -- it only copies it into a private netlink message userskb and does not own it; on return doexecuteactions keeps forwarding i...

USN-8548-2: Linux kernel vulnerabilities

It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. CVE-2026-43503 Several security issues...

USN-8530-2: Linux kernel (HWE) vulnerabilities

It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker...

USN-8530-2 linux-aws-hwe vulnerabilities

It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker...

USN-8635-1 linux-azure vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...

USN-8615-2: Linux kernel (Raspberry Pi) vulnerabilities

It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. CVE-2026-43503 Several security issues...

USN-8615-2 linux-raspi, linux-raspi-5.4 vulnerabilities

It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. CVE-2026-43503 Several security issues...

USN-8617-1 linux-kvm vulnerabilities

It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. CVE-2026-43503 Several security issues...

USN-8617-1: Linux kernel (KVM) vulnerabilities

It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. CVE-2026-43503 Several security issues...

USN-8616-1 linux-ibm, linux-ibm-5.4 vulnerabilities

It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker...