"Dirty Frag" Linux Kernel LPE Zero-Day (CVE-2026-43284, CVE-2026-43500)

[Eyal Estrin]

Dirty Frag: Universal Linux LPE
https://github.com/V4bel/dirtyfrag

Dirty Frag: Universal Linux LPE
https://www.openwall.com/lists/oss-security/2026/05/07/8

Dirty Frag: Linux Kernel Local Privilege Escalation via ESP and RxRPC
https://www.wiz.io/blog/dirty-frag-linux-kernel-local-privilege-escalation-via-esp-and-rxrpc

Dirty Frag Linux kernel local privilege escalation vulnerability mitigations
https://ubuntu.com/blog/dirty-frag-linux-vulnerability-fixes-available

How to mitigate the "Dirty Frag" vulnerability in OpenShift 4
https://access.redhat.com/solutions/7142250

Dirty Frag (CVE-2026-43284, CVE-2026-43500) Patches Released
https://almalinux.org/blog/2026-05-07-dirty-frag/

"Dirty Frag" and other issues in Amazon Linux kernels
https://aws.amazon.com/security/security-bulletins/rss/2026-027-aws/

Linux Kernel Privilege Escalation Vulnerability (Dirty Frag) Alert
https://nsfocusglobal.com/linux-kernel-privilege-escalation-vulnerability-dirty-frag-alert/

New Linux 'Dirty Frag' zero-day gives root on all major distros
https://www.bleepingcomputer.com/news/security/new-linux-dirty-frag-zero-day-with-poc-exploit-gives-root-privileges/

Eyal Estrin
Author | Cloud Architect | AWS • Azure • GCP Insights
Social: @eyalestrin
Connect: https://linktr.ee/eyalestrin Blog: https://security-24-7.com