DirtyFrag-Detector

🔍 Dirty Frag — CVE-2026-43284 / CVE-2026-43500 检测脚本 TL;DR: 存在两个新的 Linux 内核漏洞。此脚本可判断您是否易受攻击。请及时修补系统。 这是什么？ 2026 年 5 月 7 日，安全研究员 Hyunwoo Kim（@v4bel）提前公开披露了一类名为 Dirty Frag 的漏洞——由于保密协议被第三方打破，他不得不在补丁就绪之前发布。 该漏洞允许任何非特权本地用户获取 root 权限。无需竞态条件，无需时间窗口，可靠性极高。 受影响的两个子系统如下： CVE| 子系统| 模块| 引入时间| 修复（上游）...

Paranoid-Dirty-Frag-CVE-2026-43284

Dirty Frag 缓解脚本 此脚本： 1. 阻止易受攻击的内核模块加载 2. 如果当前处于活动状态，则将其卸载 3. 验证缓解状态 警告： 禁用 Linux IPsec ESP 支持（esp4/esp6） 以及 RxRPC 支持。 这可能会破坏： - strongSwan - libreswan - 某些企业 VPN - AFS/RxRPC 服务...

Reporte-de-Escalada-de-Privilegios-Local-Dirty-Frag

本地权限提升报告 — Dirty Frag 学生： Jonatan Claudio 1. 要求 方法论概述 对一台运行 Kali Linux 的虚拟机进行了漏洞评估，使用了针对 Dirty Frag 漏洞的检测脚本，该漏洞与以下 CVE 相关： CVE-2026-43284 CVE-2026-43500 随后，执行了一个用 C 语言编写的公开 Proof of Concept（PoC），以验证从无特权用户向 root 进行本地权限提升的可能性。 利用操作是在易受攻击的虚拟机内部本地执行的。 发现（含截图和代码） 截图 1. Dirty Frag 检测器的结果 2. uname -r 的结...

CVE-2026-43284

Dirty Frag - Linux 内核关键漏洞 - CVE-2026-43284 📚 简介 该漏洞利用链被归类为本地权限提升 LPE ，允许非特权用户在所有现代 Linux 发行版上获得 root 访问权限，影响自 2017 年以来发布的几乎所有内核版本，跨越约九年的版本。该利用通过 esp4、esp6 和 rxrpc 模块的原位解密路径进行操作，通过 splice2 和 sendmsg2 等标准系统调用破坏内核页缓存，既不需要用户交互，也不需要远程攻击向量。 这两个组成漏洞是： xfrm-ESP 页缓存写入 - CVE-2026-43284，位于 IPsec ESP 输入路径中。于...

EUVD-2026-63752

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 A stack memory corruption vulnerability exists in the AIX IPsec ESP decapsulation handler. Successful exploitation may corrupt kernel stack state and cause a system crash, resulting in denial of service...

CVE-2026-19448

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 A stack memory corruption vulnerability exists in the AIX IPsec ESP decapsulation handler. Successful exploitation may corrupt kernel stack state and cause a system crash, resulting in denial of service...

CVE-2026-19448

CVE-2026-19448 is a stack memory corruption vulnerability in the AIX IPsec ESP decapsulation handler , affecting IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . Successful exploitation can corrupt kernel stack state and trigger a system crash , resulting in denial of service . NVD assigns a CVSS 3.1 ...

CVE-2026-19448 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 A stack memory corruption vulnerability exists in the AIX IPsec ESP decapsulation handler. Successful exploitation may corrupt kernel stack state and cause a system crash, resulting in denial of service...

PT-2026-79255

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A stack memory corruption issue exists in the AIX IPsec ESP decapsulation handler. This can lead to the corruption of the kernel stack state, potentially causing a system...

Fragnesia LPE (CVE-2026-46300)

This module exploits CVE-2026-46300, a Linux kernel local privilege escalation vulnerability introduced in version 4.10. The flaw resides in the kernel's IPsec ESP-in-TCP handling: when an ESP-encapsulated TCP segment containing a shared fragment SKBFLSHAREDFRAG is received and decrypted, the...

MiracleLinux 8 : kernel-4.18.0-372.13.1.el8_6 (AXSA:2022-3780:12)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-3780:12 advisory. kernel: buffer overflow in IPsec ESP transformation code CVE-2022-27666 kernel: out-of-bounds read in fbcongetfont function CVE-2020-28915 Tenable h...

EUVD-2022-32163

Malicious code in bioql PyPI...

kernel: buffer overflow in IPsec ESP transformation code

A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c. This flaw allows a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation threat...

Oracle Linux 8 : kernel (ELSA-2022-5316)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-5316 advisory. - debug: lockdown kgdb Orabug: 34270802 CVE-2022-21499 - esp: limit skbpagefragrefill use to a single page Sabrina Dubroca 2062114 CVE-2022-27666 - esp...

Important: Red Hat Security Advisory: kpatch-patch security update

An update is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: kpatch-patch security update

An update for kpatch-patch is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Important: Red Hat Security Advisory: kpatch-patch security update

An update for kpatch-patch is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

ALSA-2022:5344 Important: kernel-rt security and bug fix update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: buffer overflow in IPsec ESP transformation code CVE-2022-27666 kernel: out-of-bounds read in fbcongetfont function CVE-2020-28915...

RHEL 9 : kpatch-patch (RHSA-2022:5214)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:5214 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel...

RHEL 8 : kpatch-patch (RHSA-2022:4942)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:4942 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel. Security Fixe...