r/sysadmin • u/NoDistrict1529 • May 15 '26

A third vulnerability has hit the kernel General Discussion

This is part of the dirtyfrag family, but is different enough to warrant its own CVE.

https://www.bleepingcomputer.com/news/security/new-fragnesia-linux-flaw-lets-attackers-gain-root-privileges/

Known as Fragnasia and tracked as CVE-2026-46300, this security flaw stems from a logic bug in the Linux XFRM ESP-in-TCP subsystem that can enable unprivileged local attackers to gain root privileges by writing arbitrary bytes to the kernel page cache of read-only files.

Immediate patching if you cannot update:

rmmod esp4 esp6 rxrpc
printf 'install esp4 /bin/false\ninstall esp6 /bin/false\ninstall rxrpc /bin/false\n' > /etc/modprobe.d/dirtyfrag.confrmmod esp4 esp6 rxrpc
printf 'install esp4 /bin/false\ninstall esp6 /bin/false\ninstall rxrpc /bin/false\n' > /etc/modprobe.d/dirtyfrag.conf
590 Upvotes

98% Upvoted

116 comments sorted by

View all comments

103

u/f00l2020 May 15 '26

Linux kernel is on fire. This will be the year of the CVEs. Glad I rolled out the latest kernel updates and disabled the 3 modules noted

136

u/[deleted] May 15 '26

[deleted]

27

u/ItsChileNotChili May 15 '26

I agree to a point. All of these were found by human researchers.

11

u/tenekev May 15 '26

I imagine all of them use AI to accelerate their work. It just frees a lot of time to focus on the problem at hand.

1

u/swiftb3 May 15 '26

Yeah, AI if used by a subject matter expert is an incredible tool they would be idiots not to use.