A new local privilege escalation vulnerability called Dirty Frag has been discovered in the Linux kernel, enabling unprivileged users to gain root access across major Linux distributions by exploiting flaws in the xfrm-ESP and RxRPC subsystems. This deterministic and highly reliable exploit, which builds on vulnerabilities like Copy Fail and Dirty Pipe, affects systems including Ubuntu 24.04.4, RHEL 10.1, and Fedora 44, prompting advisories from multiple vendors and recommendations to block affected kernel modules until patches are fully available.
https://thehackernews.com/2026/05/linux-kernel-dirty-frag-lpe-exploit.html