CVE-2026-43500Vulnerability
Reported by 4 independent sources · first reported by Huntress · last reported
Last reported 1 month ago
What the reports say
4 reports, newest first · the exact sentence from each-
Linux Detection Engineering - Local Privilege Escalation“DirtyFrag: CVE-2026-43284 / CVE-2026-43500 · ESP or RxRPC page-cache corruption”
-
Exploits and vulnerabilities in Q2 2026“CVE-2026-43284, CVE-2026-43500 (Dirty Frag): a family of vulnerabilities in the Linux networking subsystem (IPsec ESP and RxRPC) that lets a local user overwrite the page cache and escalate privileges to root”
-
Linux Kernel vulnerability Dirty Frag“Linux kernel is impacted by CVE-2026-43284 and CVE-2026-43500 which chained together create the Dirty Frag vulnerability.CVE-2026-43284In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb frags MSG_SPLICE_PAGES can at…”
-
Panic at the Distro“…ities pertain to the Linux kernel’s zero-copy functionality, and are named CopyFail (CVE-2026-31431), Dirty Frag (CVE-2026-43284 and CVE-2026-43500), and Fragnesia (CVE-2026-46300).”
Indicators reported together
named in the same reportsAlso named with it: CVE-2026-43284, CVE-2026-31431, CVE-2026-46300, CVE-2026-31635, CVE-2026-46331, CVE-2022-0847, CVE-2025-8088, CVE-2018-0802, CVE-2017-11882, CVE-2017-0199, CVE-2023-38831, CVE-2025-6218, CVE-2026-43494, CVE-2019-13272, CVE-2021-22555, CVE-2023-32233, CVE-2026-35273, CVE-2023-46604, CVE-2024-12356, CVE-2026-1731
Thanks — we review every report.