New Fragnesia Linux Kernel LPE Grants Root Access via Page Cache Corruption
Summary: A new Linux kernel local privilege escalation flaw codenamed Fragnesia, tracked as CVE-2026-46300 with a CVSS score of 7.8, was found in the XFRM ESP-in-TCP subsystem by researcher William Bowling of Zellic and the V12 security team, and it lets unprivileged local attackers write arbitrary bytes into the kernel page cache of read-only files to gain root. It is the third such kernel bug identified within two weeks, follows Dirty Frag and Copy Fail in corrupting the page cache of the /usr/bin/su binary, and a proof-of-concept exploit has been released by V12.
Key Takeaway: A working proof-of-concept is already public and the flaw yields root on all major distributions without requiring a race condition, while a threat actor named berz0k is separately advertising a Linux LPE zero-day for $170,000 on cybercrime forums.
Read the original at The Hacker News ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2026-46300
- Related
- CISA Adds Two Known Exploited Vulnerabilities to Catalog Cyber Risks · Oct 28, 2026CVE-2026-46300: Linux Kernel Missing Initialization of a Variable Vulnerability Known Exploited Vulnerabilities · Oct 28, 2026