Third Linux Kernel Privilege Escalation Flaw in Two Weeks
NEOSEC enrichment — no mirror of the original source
A researcher has disclosed a vulnerability of the same class as the recently disclosed "Dirty Frag" flaw, making this the third Linux kernel privilege escalation flaw with proof-of-concept (PoC) exploit code published in the last two weeks.
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at SANS NewsBitesLinked advisories
- CVE-2026-46300Linux kernel vulnerabilities
- CVE-2026-46300Linux kernel vulnerabilities
- CVE-2026-46300In the Linux kernel, the following vulnerability has been resolved:
- CVE-2026-46300Linux kernel vulnerabilities
- CVE-2026-46300Linux kernel vulnerabilities
- CVE-2026-46300Linux Kernel (Fragnesia): Schwachstelle ermöglicht Erlangen von Administratorrechten
- CVE-2026-46300Linux kernel (Azure FIPS) vulnerabilities
- CVE-2026-46300Debian linux: security update
- CVE-2026-46300Debian linux: security update
- CVE-2026-46300Linux kernel vulnerabilities
- CVE-2026-46300Linux Kernel — Linux Kernel Missing Initialization of a Variable Vulnerability
- CVE-2026-46300net: skbuff: preserve shared-frag marker during coalescing
Affected vendors and products
- Debian Linux
- Debian Linux-6.1
- Dell Secure Connect Gateway
- IBM Datapower Gateway
- IBM Qradar Siem
- Linux Linux
- Linux Linux Kernel
- Red Hat Enterprise Linux
- Red Hat Openshift
- Red Hat Openshift Container Platform
- Red Hat Redhat Enterprise Linux
- Red Hat Redhat Enterprise Linux Advanced mission critical Update Support (AUS)
More on Escalation
Other advisories
- HighCVE-2026-9661Poste Italiane Postecert FIRMAOK! 1.6.29 on Windows contains a local privilege escalation vulnerability caused by an uncontrolled OpenSSL search path, where …
- HighCVE-2026-97361There exists an improper privilege management vulnerability that could cause privilege escalation at the SpaceCom and Space Battery pack SP with WiFi.
- Not ratedosv:CVE-2026-126273NocoDB before 2026.09.0 Privilege Escalation via Incomplete Admin Bootstrap
- CriticalCVE-2026-126273NocoDB before 2026.09.0 contains a privilege escalation vulnerability in initAdminFromEnv.ts that silently skips super-admin bootstrap when the admin passwor…
- Not ratedosv:CVE-2026-126404Coder from 2.38.0 before 2.38.4 Privilege Escalation via API Key Creation
- HighCVE-2026-123769The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.13.0 …
- Not ratedosv:CVE-2026-126455OpenEMR before 8.5.0 Privilege Escalation via Missing Authorization and SQL Injection
- Not ratedosv:CVE-2026-126494OpenEMR before 8.4.0 Privilege Escalation via SMART/OAuth Scope Finalization
Other news entries
- Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi FilesNewsThe Hacker News
- Critical Zoom Workplace Flaw Could Allow Unauthenticated Remote Privilege EscalationNewsThe Hacker News
- Asus, Zoom Release Security PatchesNewsSecurityWeek
- Threat actor targets Indian fintechs on weekends when defenders aren’t watchingNewsThe Register — Security
- AI Agents Got Root on Linux via 948 Kernel Flaws in OpenAI ResearchNewsSecurityWeek
- OpenAI AI Pipeline Generates 948 Linux Root Escalation Exploits in 30-Hour RunNewsThe Hacker News
- PHP2Shell plus Fragnesia: A dangerous new route from web server to rootNewsCSO Online
- CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacksNewsBleepingComputer
Source: https://www.wiz.io/
ID