Dirty-Frag

vulnerability 2026-05-09
Dirty Frag: Chained Linux Kernel Bugs Hand Out Root, One Half Still Unpatched
Dirty Frag chains an xfrm-ESP page-cache write (CVE-2026-43284) with an unpatched RxRPC page-cache write (CVE-2026-43500) for reliable root on most Linux distros. Embargo blew up early — public PoC is out, RxRPC fix is not.
linux-kernel lpe cve-2026-43284 cve-2026-43500 rxrpc xfrm ipsec afs dirty-frag copy-fail

Dirty Frag: Chained Linux Kernel Bugs Hand Out Root, One Half Still Unpatched