Fragnesia (CVE-2026-46300): Patched kernels available in testing (opens in new tab)

Less than a week after Dirty Frag, researcher William Bowling of the V12 security team has disclosed a third Linux kernel local-root flaw in the same broad code area (IPsec ESP / rxrpc) that they have named Fragnesia, tracked as CVE-2026-46300. The proof-of-concept is published in V12’s pocs repository on GitHub and the upstream patch was posted to the netdev mailing list earlier today. Fragnesia is a separate bug from Dirty Frag, but it lives in the same surface and chains through the same m...