VulnerabilitySANS NewsBites
Mitigate Another Linux Kernel Privilege Escalation
NEOSEC enrichment — no mirror of the original source
A researcher has publicly disclosed the second privilege escalation exploit for the Linux kernel in two weeks. Dubbed "Dirty Frag" and compared to the recent "Copy Fail," the exploit is deterministic and involves chaining two page cache wri
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at SANS NewsBitesLinked advisories
- CVE-2026-43284Linux kernel vulnerabilities
- CVE-2026-43284Linux kernel vulnerabilities
- CVE-2026-43284In the Linux kernel, the following vulnerability has been resolved:
- CVE-2026-43284Linux kernel (Raspberry Pi) vulnerabilities
- CVE-2026-43284Linux kernel vulnerabilities
- CVE-2026-43284Linux kernel vulnerabilities
- CVE-2026-43284Linux Kernel (Dirty Frag): Mehrere Schwachstellen ermöglichen Erlangen von Administratorrechten
- CVE-2026-43284Debian linux: security update
- CVE-2026-43284Linux kernel vulnerability
- CVE-2026-43284Linux kernel vulnerabilities
- CVE-2026-43284Linux kernel (Azure FIPS) vulnerabilities
- CVE-2026-43500In the Linux kernel, the following vulnerability has been resolved:
- CVE-2026-43284Linux kernel vulnerabilities
- CVE-2026-43284xfrm: esp: avoid in-place decrypt on shared skb frags
- CVE-2026-43284Linux Kernel: Sicherheitslücke
- CVE-2026-43500Linux Kernel: Sicherheitslücke
- CVE-2026-43284Linux kernel vulnerabilities
- CVE-2026-43500rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present
- CVE-2026-43284Debian linux: security update
Affected vendors and products
More on Escalation
Other advisories
- Not ratedosv:CVE-2026-63198traQ: Privilege escalation by OAuth prompt=none request
- Not ratedosv:CVE-2026-119922Babelfish for PostgreSQL Privilege Escalation
- Not ratedosv:CVE-2026-97350Local Privilege Escalation via OpenVPN Configuration and Proxy Settings in Securepoint SSL VPN Client v2 for Windows
- Not ratedosv:CVE-2026-121559GLPI 10.0.0 before 10.0.28 and 11.0.0 before 11.0.10 Privilege Escalation via User Cloning
- Not ratedosv:CVE-2026-121543smart-sso through 2.0.1 Incorrect Authorization in PermissionFilter Enables Admin Escalation
- Not ratedosv:CVE-2026-88810Privilege escalation in downstream clusters via GlobalRole inheritedNamespacedRules
- Not ratedosv:CVE-2026-94290Privilege escalation to cluster-admin on the Rancher local cluster through Fleet's agent management controller
- Not ratedosv:CLEANSTART-2025-HT71745privilege escalation vulnerability exists in Node
Other news entries
- PHP2Shell plus Fragnesia: A dangerous new route from web server to rootNewsCSO Online
- CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacksNewsBleepingComputer
- Adobe, Veeam, Juniper Networks Patch Critical VulnerabilitiesNewsSecurityWeek
- Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security BypassNewsThe Hacker News
- Tailscale warns of SSH flaws allowing root privilege escalationNewsBleepingComputer
- Warp says attackers exploited a vendor in its infrastructure and accessed agent trace and telemetry dataBreachpwn.watch
- Cisco Secure Client Secure Firewall Posture Module Privilege Escalation VulnerabilityNewsCisco PSIRT
- Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory BugNewsThe Hacker News
Source: https://www.microsoft.com/
ID