{"id":641823,"date":"2026-05-14T02:51:17","date_gmt":"2026-05-14T02:51:17","guid":{"rendered":"https:\/\/www.newsbeep.com\/us\/641823\/"},"modified":"2026-05-14T02:51:17","modified_gmt":"2026-05-14T02:51:17","slug":"fragnesia-made-public-as-latest-linux-local-privilege-escalation-vulnerability","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/us\/641823\/","title":{"rendered":"Fragnesia Made Public As Latest Linux Local Privilege Escalation Vulnerability"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" alt=\"LINUX KERNEL\" src=\"https:\/\/www.phoronix.com\/assets\/categories\/linuxkernel.webp\" width=\"100\" height=\"100\"\/><br \/>\nFollowing last week&#8217;s disclosure of <a href=\"https:\/\/www.phoronix.com\/news\/Dirty-Frag-Linux\" rel=\"nofollow noopener\" target=\"_blank\">the Dirty Frag vulnerability for the Linux kernel<\/a>, which only finished being <a href=\"https:\/\/www.phoronix.com\/news\/Linux-7.0.6-Released\" rel=\"nofollow noopener\" target=\"_blank\">patched up in mainline on Monday<\/a>, Fragnesia is now public as a similar local privilege escalation (LPE) vulnerability.<\/p>\n<p>Announced today on the open-source security mailing list by V12 Security is Fragnesia as a local privilege escalation exploit that is of the same vulnerability class as Dirty Frag. Fragnesia centers around a separate bug within the ESP\/XFRM code with a logic bug to allow arbitrary byte writes into the kernel page cache of read-only files.&#13;<\/p>\n<p>Proof of concept code for Fragnesia is already out there. There is <a href=\"https:\/\/lore.kernel.org\/netdev\/20260513041635.1289541-1-vakzz@zellic.io\/\" rel=\"nofollow noopener\" target=\"_blank\">a two-line patch<\/a> for addressing the issue within the Linux kernel&#8217;s skbuff.c code. That patch hasn&#8217;t yet been mainlined or picked up by any mainline kernel releases but presumably will be in short order for addressing this local privilege escalation issue.&#13;<\/p>\n<p align=\"center\"><img decoding=\"async\" src=\"https:\/\/www.newsbeep.com\/us\/wp-content\/uploads\/2026\/05\/1778727077_38_image.webp\" alt=\"Fragnesia logo\"\/><\/p>\n<p>More details on <a href=\"https:\/\/www.openwall.com\/lists\/oss-security\/2026\/05\/13\/3\" rel=\"nofollow noopener\" target=\"_blank\">the oss-security list<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"Following last week&#8217;s disclosure of the Dirty Frag vulnerability for the Linux kernel, which only finished being patched&hellip;\n","protected":false},"author":2,"featured_media":641824,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[31],"tags":[7278,7277,7275,7274,7281,7279,7276,7280,7273,7284,74,7282,7283],"class_list":["post-641823","post","type-post","status-publish","format-standard","has-post-thumbnail","category-technology","tag-desktop-linux","tag-linux-benchmarking","tag-linux-hardware-benchmarks","tag-linux-hardware-reviews","tag-linux-how-to","tag-linux-performance","tag-linux-server-benchmarks","tag-open-source-graphics","tag-phoronix","tag-phoronix-test-suite","tag-technology","tag-ubuntu-benchmarks","tag-ubuntu-hardware"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/posts\/641823","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/comments?post=641823"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/posts\/641823\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/media\/641824"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/media?parent=641823"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/categories?post=641823"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/tags?post=641823"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}