CVE-2026-43284-DirtyFrag-PoC

CVE-2026-43284 — Corrupción de caché de páginas XFRM/ESP 4 bytes Prueba de concepto de escalada local de privilegios mediante corrupción de caché de páginas XFRM/ESP Primitiva de escritura de 4 bytes · 48 iteraciones · Sobrescritura de 192 bytes ELF · usuario no privilegiado + netns Prueba de...

cve_2026_31431

CVE-2026-31431 "Copy Fail" Toolkit Detector and proof-of-concept LPE for the Linux algifaead / authencesn page-cache scratch-write bug disclosed 2026-04-29. Disclosure writeup: https://xint.io/blog/copy-fail-linux-distributions Authorization Use only on hosts you own or are explicitly engaged to...

DIRTY-FRAG-Detection-with-Wazuh-4.14.4

Detección de DIRTY FRAG con Wazuh 4.14.4 - CVE-2026-43284 / CVE-2026-43500 Ingeniería de detección para la LPE del kernel Dirty Frag - Ubuntu / RHEL / Debian / Amazon Linux ¿Qué es Dirty Frag? CVE-2026-43284 / CVE-2026-43500 es una escalada de privilegios local LPE del kernel de Linux que encaden...

Dirty-Frag-CVE-2026-43284

Dirty Frag CVE-2026-43284 and CVE-2026-43500 Exploit Reproduction and Detection Lab for a Linux kernel local privilege escalation chain. Status: VERIFIED. I completed the reproduction, the fileless verification, and the syscall-level detection in the lab kernel 6.18.9+kali-amd64. This document is...

dirtyfrag

Dirty Frag: Universal Linux LPE Abstract This document describes the Dirty Frag vulnerability class, first discovered and reported by Hyunwoo Kim @v4bel, which can obtain root privileges on major Linux distributions by chaining the xfrm-ESP Page-Cache Write CVE-2026-43284 vulnerability and the...

CVE-2026-43284

🚨 CVE-2026-43284 - Dirty Frag 🚨 Universal Linux Kernel Local Privilege Escalation 📋 Overview Dirty Frag also known as Copy Fail 2 is a high-impact local privilege escalation vulnerability in the Linux kernel. It allows an unprivileged local user to obtain root privileges on affected systems...

CVE-2026-43284

Dirty Frag: استغلال صلاحيات شامل لنظام لينكس ملخص يشرح هذا المستند فئة الثغرات Dirty Frag، التي اكتشفها وأبلغ عنها Hyunwoo Kim @v4bel. من خلال ربط xfrm-ESP Page-Cache Write CVE-2026-43284 مع RxRPC Page-Cache Write CVE-2026-43500، يمكن للمهاجم الوصول إلى صلاحيات الجذر root على توزيعات لينكس...

DirtyFrag-for-dummies

Dirty Frag / CVE-2026-43284 — Notas de investigación Resumen Este repositorio contiene un diagrama técnico depurado y notas complementarias para la vulnerabilidad del kernel de Linux comúnmente conocida como Dirty Frag y rastreada para la ruta xfrm-ESP como CVE-2026-43284. El problema pertenece a...

CVE-2026-43284-dirtyfrag-detection

DirtyFrag CVE-2026-43284 PoC Validation and auditd Detection Scope: Linux Local Privilege Escalation LPE validation focused on the XFRM/ESP path associated with CVE-2026-43284. This repository contains an English report and evidence artifacts from a controlled laboratory validation of the public...

CVE-2026-31431

CopyFail2 CVE-2026-31431 - Python Implementation Python port of the CopyFail2 kernel exploit leveraging xfrm ESP-in-UDP MSGSPLICEPAGES no-COW fast path for unprivileged Linux local privilege escalation. Replaces a nologin/false entry in /etc/passwd with a passwordless uid-0 user and drops into a...

yc-mk8s-copy-fail-mitigation

Copy Fail / Dirty Frag Mitigation for Yandex Managed Kubernetes Automatic application of mitigation for vulnerabilities CVE-2026-31431, CVE-2026-43284 and CVE-2026-43500 in the Linux kernel on all worker nodes of a Yandex Managed Kubernetes cluster. Vulnerability Description CVE ID: CVE-2026-4328...

Dirty-Frag-Kubernetes-PoC

Dirty Frag CVE-2026-43284 — Kubernetes Container Escape PoC A proof-of-concept demonstrating how a default, unprivileged Kubernetes Pod can achieve node-level code execution on Amazon EKS by exploiting the Dirty Frag Linux kernel page-cache corruption vulnerability through shared container image...

Dirty-Frag-Analysis

تحليل تقني متعمق لـ Dirty Frag CVE-2026-43284 xfrm-ESP / CVE-2026-43500 RxRPC ثغرة رفع صلاحيات محلية في نواة لينكس — تفكيك PoC · تحليل Shellcode · مبدأ التصحيح · سكربت الكشف نظرة عامة على الثغرة يحقق Dirty Frag رفع صلاحيات من مستخدم محلي عادي إلى root على جميع توزيعات لينكس الرئيسية تقريبًا، من...

CVE-2026-43284

🚨 CVE-2026-43284 — Dirty Frag 🚨 Universal Linux Kernel Local Privilege Escalation Overview Field| Detail ---|--- CVE| CVE-2026-43284 xfrm/ESP + CVE-2026-43500 RxRPC Nickname| Dirty Frag CVSS| 7.8 HIGH Type| Local Privilege Escalation LPE Introduced| Linux kernel 4.10 2017, commit cac2661c53f3...

XCP_ng_CVE-2026-43284_tester

XCP-ng डर्टी फ्रैग डायग्नॉस्टिक — CVE-2026-43284 एक सामुदायिक डायग्नॉस्टिक उपकरण जो यह निर्धारित करने के लिए है कि क्या कोई XCP-ng dom0 होस्ट CVE-2026-43284 "डर्टी फ्रैग" के लिए एक्सपोज़्ड है, जो Linux कर्नेल के xfrm-ESP सबसिस्टम में एक स्थानीय विशेषाधिकार वृद्धि भेद्यता है। TL;DR — सभी मौजूदा...

Fragnesia-go

fragnesia-go One SA. One byte at a time. No race. Go port of fragnesia CVE-2026-46300. Member of the Dirty Frag vulnerability class - separate bug, same surface, own patch. How it works tl;dr The bug is in the Linux XFRM ESP-in-TCP subsystem. When TCPULP espintcp is installed on a socket after da...

copyfail2_electric_boogaloo_fix

copyfail2electricboogaloofix A temporary mitigation against copyfail variant copyfail2electricboogaloo - Unprivileged Linux LPE via xfrm ESP-in-UDP MSGSPLICEPAGES no-COW fast path. Page-cache write into any readable file. Overwrites a nologin line in /etc/passwd with sick::0:0:…:/:/bin/bash and s...

CVE-2026-46300

🛡️ CVE-2026-46300 - Fragnesia एक स्वच्छ और घातक पेज-कैश हमला "Dirty Frag" परिवार का एक रूप 📌 अवलोकन CVE-2026-46300 Fragnesia लिनक्स कर्नेल के सॉकेट बफर हैंडलिंग skbtrycoalesce में XFRM/ESP-in-TCP उपप्रणाली espintcp ULP के अंतर्गत एक उच्च-गंभीरता तर्क दोष है। एक अनाधिकृत स्थानीय हमलावर किसी भी पठनी...

USN-8548-2: Linux kernel vulnerabilities

It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. CVE-2026-43503 Several security issues...

USN-8530-2: Linux kernel (HWE) vulnerabilities

It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker...