--- title: "Dirty Frag is a New Linux Exploit That Grants Root, and There's No Proper Patch Yet" url: https://daily.dev/posts/dirty-frag-is-a-new-linux-exploit-that-grants-root-and-there-s-no-proper-patch-yet-fmw6euh4k source_url: https://feed.itsfoss.com/link/24361/17337269/dirty-frag-linux-exploit type: article source: "It's Foss" published: 2026-05-09T06:53:03.781Z updated: 2026-05-11T12:08:32.619Z tags: ["security", "linux"] reading_time: 3 upvotes: 0 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Dirty Frag is a New Linux Exploit That Grants Root, and There's No Proper Patch Yet **[It's Foss](https://daily.dev/sources/itsfoss)** · 3 min read · 0 upvotes · 0 comments ## Summary A new Linux kernel privilege escalation exploit called Dirty Frag has been publicly disclosed ahead of schedule after an unnamed third party leaked it. It chains two CVEs (CVE-2026-43284 and CVE-2026-43500) to modify in-memory copies of system files without touching disk, ultimately granting root access. The first flaw targets /usr/bin/su via xfrm-ESP, while the second targets /etc/passwd via RxRPC. Together they cover most major Linux distributions. AlmaLinux has patched kernels in testing; all others should blacklist the esp4, esp6, and rxrpc kernel modules as an immediate mitigation and reboot once a proper patch is available. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: --- Tags: [#security](https://daily.dev/tags/security), [#linux](https://daily.dev/tags/linux) [View this post on daily.dev](https://daily.dev/posts/dirty-frag-is-a-new-linux-exploit-that-grants-root-and-there-s-no-proper-patch-yet-fmw6euh4k)