RedditPP Mascot

RedditPP

r/sysadmin • … • u/Khyta

Dirty Frag - New root exploit targeting newest Linux kernel

https://github.com/V4bel/dirtyfrag

Mitigations are this from the Repo: \`sh -c "printf 'install esp4 /bin/false\\ninstall esp6 /bin/false\\ninstall rxrpc /bin/false\\n' > /etc/modprobe.d/dirtyfrag.conf; rmmod esp4 esp6 rxrpc 2>/dev/null; true"\`

**Note that this breaks IPSec and RxRPC.**

Timeline of disclosure:

2026-04-30: Submitted detailed information about the esp vulnerability and a weaponized exploit that achieves root privileges on several major distributions to [email protected].

2026-04-30: Submitted the patch for the esp vulnerability to the netdev mailing list. Information about this issue was published publicly.

2026-04-30 (+9h): Kuan-Ting Chen submitted a vulnerability report for the esp vulnerability with a reproducer to [email protected].

2026-05-04: Kuan-Ting Chen submitted the shared-frag approach patch to the netdev mailing list.

2026-05-07: The patch was merged into the netdev tree.

2026-05-07: Submitted detailed information about the vulnerability and the exploit to the linux-distros mailing list. The embargo was set to 5 days, with an agreement that if a third party publishes the exploit on the internet during the embargo period, the Dirty Frag exploit would be published publicly.

2026-05-07: Detailed information and the exploit for this vulnerability were published publicly by an unrelated third party, breaking the embargo.

2026-05-07: After obtaining agreement from distribution maintainers to fully disclose Dirty Frag, the entire Dirty Frag document was published.

— 0