TLDR Tech / InfoSec
Linux bitten by second severe vulnerability in as many weeks
Dirty Frag chains two Linux kernel bugs, CVE-2026-43284 and CVE-2026-43500, to allow low-privilege users to gain root by corrupting page cache data via the esp4/esp6 and rxrpc networking paths. The exploit code is public and has already been tested by attackers. Major distros like Debian, AlmaLinux, and Fedora now ship fixes, but protection still depends on fast patching and reboots, especially on shared servers and VMs.
Read the full story