All Topics

Technology

Art

Fragnesia: New Linux Kernel Local Privilege Escalation Vulnerability Disclosed

mikece

18d ago· 1 min readenNews

70/100

Toasty

Bagelometer↗

Warm and crisp on the edges. A bagel with a bit of bite.

Score70TypenewsSentimentnegative

Summary

A new Linux kernel local privilege escalation (LPE) vulnerability called "Fragnesia" has been made public, following closely on the heels of the similar "Dirty Frag" vulnerability. Fragnesia is a separate bug within the ESP/XFRM code that contains a logic bug allowing arbitrary byte writes into the kernel page cache of read-only files. The vulnerability was announced by V12 Security on the open-source security mailing list.

Key quotes

· 2 pulled

Announced today on the open-source security mailing list by V12 Security is Fragnesia as a local privilege escalation exploit that is of the same vulnerability class as Dirty Frag.

Fragnesia centers around a separate bug within the ESP/XFRM code with a logic bug to allow arbitrary byte writes into the kernel page cache of read-only files.

Snippet from the RSS feed

Following last week's disclosure of the Dirty Frag vulnerability for the Linux kernel, which only finished being patched up in mainline on Monday, Fragnesia is now public as a similar local privilege escalation (LPE) vulnerability.

You might also wanna read

AI-assisted vulnerability discovery raises concerns about Linux kernel security

This opinion article discusses a troubling trend in Linux security where AI-powered tools are being used to discover and exploit kernel vuln

theregister.com·1d ago

CIFSwitch Linux Vulnerability Allows Unprivileged Users to Gain Root Access via CIFS Flaw

A new Linux local-root privilege escalation vulnerability named CIFSwitch has been disclosed by researcher Asim Manizada. The flaw combines

almalinux.org·2d ago