DigiNews

Tech Watch by Johan Denoyer

← Back to articles

Fragnesia Made Public As Latest Linux Local Privilege Escalation Vulnerability

Quality: 8/10 Relevance: 9/10

Summary

Phoronix reports Fragnesia, a Linux kernel local privilege escalation vulnerability discovered and disclosed by V12 Security. It mirrors the Dirty Frag class, exploiting ESP/XFRM logic to enable arbitrary writes in kernel page cache of read-only files; a two-line patch for skbuff.c exists but is not yet mainlined. The piece references oss-security discussion and notes PoC availability, with mitigations pending in mainline kernels.

🚀 Service construit par Johan Denoyer