Fragnesia Linux flaw gives local attackers root access (opens in new tab)

Security researchers disclosed Fragnesia, a Linux kernel local privilege escalation vulnerability tracked as CVE-2026-46300 with a CVSS score of 7.8, after recent Dirty Frag disclosures in the same kernel area. The flaw affects the Linux kernel XFRM subsystem, specifically ESP-in-TCP processing tied to IPsec support, and could let an unprivileged local user gain root access through page-cache corruption. LWN reported that Sam James announced the issue on the OSS Security mailing list and said...