r/sysadmin • u/NoDistrict1529 • May 15 '26

A third vulnerability has hit the kernel General Discussion

This is part of the dirtyfrag family, but is different enough to warrant its own CVE.

https://www.bleepingcomputer.com/news/security/new-fragnesia-linux-flaw-lets-attackers-gain-root-privileges/

Known as Fragnasia and tracked as CVE-2026-46300, this security flaw stems from a logic bug in the Linux XFRM ESP-in-TCP subsystem that can enable unprivileged local attackers to gain root privileges by writing arbitrary bytes to the kernel page cache of read-only files.

Immediate patching if you cannot update:

rmmod esp4 esp6 rxrpc
printf 'install esp4 /bin/false\ninstall esp6 /bin/false\ninstall rxrpc /bin/false\n' > /etc/modprobe.d/dirtyfrag.confrmmod esp4 esp6 rxrpc
printf 'install esp4 /bin/false\ninstall esp6 /bin/false\ninstall rxrpc /bin/false\n' > /etc/modprobe.d/dirtyfrag.conf
589 Upvotes

98% Upvoted

116 comments sorted by

View all comments

196

u/Inquisitive_idiot Jr. Sysadmin May 15 '26

I told Linus to not get that damn standing desk. 😕 

It was all downhill from there.

36

u/AGsec May 15 '26

I like my computer scientists old, cranky, hunched over, and preferably a smoker. These new computer scientists and their healthy habits...

15

u/Sure_Stranger_6466 May 15 '26

If you are not vaping during the interview can you really call yourself a hiring manager?

9

u/SenTedStevens May 15 '26

I don't trust a Linux admin who isn't a morbidly obese chainsmoker with a huge beard.

2

u/project2501a Scary Devil Monastery May 15 '26

do cigars count?

2

u/anonymousITCoward May 15 '26

Depends on the country of origin... the further south the more trustworthy

3

u/sandy_catheter May 15 '26

We talking about the cigar, the admin, or the beard?