VulnHub

Researchers have identified a new vulnerability in the Linux kernel, named Fragnesia and tracked as CVE-2026-46300, which could allow local attackers to gain root access through page cache corruption. This flaw affects the XFRM ESP-in-TCP subsystem and has a CVSS score of 7.8, indicating a significant risk. If exploited, it could enable attackers to take complete control of the affected systems. It's crucial for users of affected Linux systems to be aware of this vulnerability and take necessary precautions. The disclosure of this flaw highlights ongoing security challenges within the Linux ecosystem.

Researchers have discovered a new local privilege escalation vulnerability in the Linux kernel, identified as CVE-2026-46300, and nicknamed 'Fragnesia.' This vulnerability is related to the earlier Dirty Frag bugs and affects the xfrm-ESP Linux module. The flaw was unintentionally introduced when a patch was applied to fix one of the original Dirty Frag vulnerabilities, specifically CVE-2026-43284. This means that systems using the affected module could be at risk, potentially allowing attackers to gain elevated privileges. It is crucial for users and administrators of Linux systems to stay informed about this issue and apply necessary updates as they become available.

A new vulnerability known as the Fragnesia flaw has been discovered in the Linux kernel, allowing unprivileged local users to escalate their privileges to root access. This flaw poses a significant risk as it enables attackers with local access to gain complete control over affected systems. Researchers have indicated that various Linux distributions could be impacted, making it crucial for system administrators to assess their environments. The potential for exploitation is concerning, especially in multi-user setups where unauthorized users could exploit this flaw to compromise system integrity. Users and administrators should prioritize patching their systems to mitigate the risk associated with this vulnerability.

A new variant of a local privilege escalation vulnerability in the Linux kernel, named Fragnesia, has been identified. This vulnerability, tracked as CVE-2026-46300 with a CVSS score of 7.8, allows local attackers to gain root access through page cache corruption. This marks the third such vulnerability discovered in the Linux kernel within just two weeks, raising concerns for users and administrators. The flaw is rooted in the kernel's XFRM component, which is responsible for managing IPsec protocols. This means that systems using affected kernel versions could be at risk if not addressed promptly, as attackers could exploit this vulnerability to gain elevated privileges and potentially take control of vulnerable systems.

A newly disclosed Linux vulnerability, dubbed 'copy.fail', poses a serious risk across multiple distributions, including Ubuntu, RHEL, Debian, SUSE, Amazon Linux, and Fedora. Revealed by Theori on April 29, 2026, this local privilege escalation flaw allows attackers to manipulate the Linux kernel's crypto API to write unauthorized data into the page cache of files they do not own. Importantly, the exploit does not modify files on disk, making it difficult for traditional monitoring tools like AIDE and Tripwire to detect. This vulnerability is concerning because it affects a wide range of systems without requiring any specific modifications for different distributions. Organizations using these Linux variants should prioritize assessing their security posture and applying necessary mitigations to protect against potential exploitation.

A newly discovered zero-day vulnerability, dubbed 'Dirty Frag', affects most Linux distributions and allows attackers to escalate their privileges to root level. This means that a malicious actor could gain full control over a compromised system, putting sensitive data and operations at risk. The vulnerability is particularly concerning because it impacts a wide range of systems, making it a significant threat for both individual users and organizations that rely on Linux. Researchers are urging users and system administrators to take immediate action to secure their systems. The exact details of how this vulnerability can be exploited are still being analyzed, but the potential for active exploitation is high, prompting a call for swift remediation efforts.

A new vulnerability in Linux, named 'Dirty Frag', has emerged, specifically affecting the xfrm-ESP and RxRPC modules. One of the flaws, identified as CVE-2026-43284, has already been patched in the Linux kernel, but the second flaw, CVE-2026-43500, remains unpatched. This situation poses a significant risk as attackers can exploit the unpatched vulnerability to gain root access to affected systems. The implications are serious, particularly for organizations using Linux systems that rely on these modules for secure networking. Users and system administrators are urged to apply the latest patches for the patched vulnerability and remain vigilant for updates regarding the unpatched issue.

A newly discovered vulnerability in Linux, tracked as CVE-2026-31431 and named 'Copy Fail', could allow local, unprivileged users to escalate their privileges to root. This flaw lets attackers write four controlled bytes into page cache files, which is a significant security risk for many major Linux distributions. Researchers from Xint Code assigned a CVSS score of 7.8 to this vulnerability, indicating its seriousness. The issue affects various Linux systems, potentially putting numerous users at risk if they do not take action. Companies and users are urged to monitor their systems and apply necessary patches to mitigate this risk.

A new vulnerability known as 'Copy Fail' has been identified in Linux kernels released since 2017. This flaw allows local, unprivileged attackers to escalate their privileges and gain root access to affected systems. Researchers have published an exploit for this vulnerability, raising concerns about its potential for misuse. Major Linux distributions are at risk, which could allow attackers to take control of sensitive systems. Users of these systems should be aware of the threat and take steps to secure their environments.

A flaw in Microsoft Entra's Agent ID allowed for privilege escalation, which could lead to a complete tenant takeover through the misuse of Service Principals. This vulnerability posed a significant risk to organizations using Microsoft Entra, as it could enable attackers to gain unauthorized access to sensitive data and systems. Microsoft has since released a patch to address this issue, ensuring that affected users can secure their environments. It is crucial for companies to apply this update promptly to mitigate potential risks and protect their assets from exploitation. Regular monitoring and security practices should also be reinforced to prevent similar vulnerabilities in the future.

Researchers at Kaspersky have identified a new vulnerability in the Remote Procedure Call (RPC) architecture of Windows. This flaw allows an attacker to set up a counterfeit RPC server, which they can then use to gain elevated privileges on a target system. The implications of this vulnerability are significant, as it could enable attackers to execute malicious actions with higher access rights, potentially compromising sensitive data and system integrity. Organizations using affected systems should be vigilant and consider implementing security measures to defend against this exploitation. The discovery emphasizes the need for regular updates and security practices to mitigate such risks.

Researchers have discovered a new attack method called GPUBreach that exploits GPU Rowhammer vulnerabilities in GDDR6 memory. This technique allows attackers to flip bits in memory, which can corrupt page tables and ultimately lead to privilege escalation, giving them root access to the system. This is particularly concerning as it affects systems using GDDR6 memory, commonly found in high-end graphics cards used for gaming and data processing. The implications are serious; if exploited, attackers could take complete control of affected systems. Users and organizations with these memory types should be vigilant about potential attacks and consider implementing security measures to mitigate risks.