CVE-2026-43284Vulnerability
Reported by 5 independent sources · first reported by Huntress · last reported
Last reported 27 days ago
What the reports say
5 reports, newest first · the exact sentence from each-
Cyber Brief 26-06 - May 2026“As for notable Common Vulnerabilties and Exposures (CVEs), the Linux zero-day Dirty Frag (CVE-2026-43284), which enables local root privilege escalation, was publicly disclosed with a proof-of-concept following a broken embargo, affecting most major distributions.”
-
Linux Detection Engineering - Local Privilege Escalation“DirtyFrag: CVE-2026-43284 / CVE-2026-43500 · ESP or RxRPC page-cache corruption”
-
Exploits and vulnerabilities in Q2 2026“CVE-2026-43284, CVE-2026-43500 (Dirty Frag): a family of vulnerabilities in the Linux networking subsystem (IPsec ESP and RxRPC) that lets a local user overwrite the page cache and escalate privileges to root”
-
Linux Kernel vulnerability Dirty Frag“Linux kernel is impacted by CVE-2026-43284 and CVE-2026-43500 which chained together create the Dirty Frag vulnerability.CVE-2026-43284In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb frags MSG_SPLICE_PAGES can at…”
-
Panic at the Distro“…se named vulnerabilities pertain to the Linux kernel’s zero-copy functionality, and are named CopyFail (CVE-2026-31431), Dirty Frag (CVE-2026-43284 and CVE-2026-43500), and Fragnesia (CVE-2026-46300).”
Indicators reported together
named in the same reportsAlso named with it: CVE-2026-43500, CVE-2026-31431, CVE-2026-46300, CVE-2026-31635, CVE-2026-46331, CVE-2022-0847, CVE-2026-35616, CVE-2026-0300, CVE-2026-33825, CVE-2026-45585, CVE-2025-8088, CVE-2018-0802, CVE-2017-11882, CVE-2017-0199, CVE-2023-38831, CVE-2025-6218, CVE-2026-43494, CVE-2019-13272, CVE-2021-22555, CVE-2023-32233
Thanks — we review every report.