{"id":7314,"date":"2026-05-14T16:47:32","date_gmt":"2026-05-14T16:47:32","guid":{"rendered":"https:\/\/delimiter.online\/blog\/fragnesia-linux-lpe\/"},"modified":"2026-05-14T16:47:32","modified_gmt":"2026-05-14T16:47:32","slug":"fragnesia-linux-lpe","status":"publish","type":"post","link":"https:\/\/delimiter.online\/blog\/fragnesia-linux-lpe\/","title":{"rendered":"New Fragnesia Linux LPE Flaw Grants Root Access via Page Cache"},"content":{"rendered":"

A new local privilege escalation<\/a> vulnerability in the Linux<\/a> kernel<\/a> has been disclosed, allowing attackers with local access to gain root privileges. Tracked as CVE-2026-46300 and assigned a CVSS score of 7.8, the flaw is being referred to as Fragnesia.<\/p>\n

This issue represents the third such kernel vulnerability identified within two weeks, following closely on the heels of the Dirty Frag bug. Security researchers have confirmed that the weakness stems from a flaw in the Linux kernel’s XFRM subsystem, which handles IPsec packet processing and security association management.<\/p>\n

Technical Details of the Fragnesia Flaw<\/h2>\n

The core of the vulnerability lies in how the kernel manages page cache entries during XFRM operations. An attacker can exploit a race condition or a corruption path within the page cache, leading to a use after free or an out of bounds write scenario.<\/p>\n

According to the advisory, a local user with limited system access can trigger this corruption. By sending specially crafted netlink messages or by performing specific sets of socket operations, the attacker causes the kernel to misreference memory pages. This state can then be leveraged to elevate privileges to root level.<\/p>\n

The exploit does not require any special hardware capabilities or physical access. It can be executed from a standard user shell, making it a significant concern for multi-user systems, cloud environments, and containerized deployments where kernel isolation is relied upon.<\/p>\n

Impact and Affected Systems<\/h2>\n

The flaw affects all Linux kernel versions that include the XFRM subsystem, which has been present in the mainline kernel for many years. Enterprise distributions such as Red Hat Enterprise Linux, Ubuntu, Debian, and SUSE Linux Enterprise are all potentially vulnerable until patched.<\/p>\n

Because the exploit allows a full root compromise, the implications for system integrity, data confidentiality, and service availability are severe. Any service or process running under the affected kernel could be hijacked by an unprivileged user who successfully executes the Fragnesia exploit.<\/p>\n

Security teams are advised to prioritize patching, as the vulnerability is classified with a high severity rating. The CVSS score of 7.8 reflects the relatively low attack complexity and the high impact on confidentiality, integrity, and availability.<\/p>\n

Response and Mitigation<\/h2>\n

Linux kernel maintainers have been notified of the Fragnesia vulnerability. A patch has been prepared and is being reviewed for inclusion in the stable kernel tree. Distribution vendors are expected to release security updates in the coming days.<\/p>\n

In the interim, system administrators can reduce risk by limiting local user accounts, applying the principle of least privilege, and enabling kernel protections such as SELinux or AppArmor. However, these measures do not fully mitigate the root cause of the privilege escalation.<\/p>\n

Organizations running containerized workloads should also ensure that container runtimes are configured with user namespace remapping and seccomp profiles to narrow the attack surface.<\/p>\n

This development follows a similar pattern to the Dirty Frag vulnerability, which also targeted the kernel’s memory management to achieve escalation. Security researchers have noted an increase in kernel level bugs being discovered in core subsystems, indicating a broader focus on low level exploitation vectors.<\/p>\n

The kernel community is expected to release an official stable update addressing CVE-2026-46300 within the next two weeks. System administrators are urged to apply the patch as soon as it becomes available to prevent potential exploitation.<\/p>\n

Source: Delimiter Online<\/p>\n","protected":false},"excerpt":{"rendered":"

A new local privilege escalation vulnerability in the Linux kernel has been disclosed, allowing attackers with local access to gain root privileges. Tracked as CVE-2026-46300 and assigned a CVSS score of 7.8, the flaw is being referred to as Fragnesia. This issue represents the third such kernel vulnerability identified within two weeks, following closely on […]<\/p>\n","protected":false},"author":1,"featured_media":7315,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[505],"tags":[8597,7569,6421,2938,6975],"class_list":["post-7314","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-cve-2026-46300","tag-kernel","tag-linux","tag-privilege-escalation","tag-security-vulnerability"],"_links":{"self":[{"href":"https:\/\/delimiter.online\/blog\/wp-json\/wp\/v2\/posts\/7314","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/delimiter.online\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/delimiter.online\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/delimiter.online\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/delimiter.online\/blog\/wp-json\/wp\/v2\/comments?post=7314"}],"version-history":[{"count":0,"href":"https:\/\/delimiter.online\/blog\/wp-json\/wp\/v2\/posts\/7314\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/delimiter.online\/blog\/wp-json\/wp\/v2\/media\/7315"}],"wp:attachment":[{"href":"https:\/\/delimiter.online\/blog\/wp-json\/wp\/v2\/media?parent=7314"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/delimiter.online\/blog\/wp-json\/wp\/v2\/categories?post=7314"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/delimiter.online\/blog\/wp-json\/wp\/v2\/tags?post=7314"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}