tech

Linux bitten by second severe vulnerability in as many weeks

Production-version patches are coming online and should be installed pronto.

Linux bitten by second severe vulnerability in as many weeks

TL;DR

  • The 'Dirty Frag' vulnerability allows untrusted users to gain root access on Linux systems.
  • Exploit code for Dirty Frag has been leaked online, and signs of its use in the wild have been observed.
  • The vulnerability chains two exploits, CVE-2026-43284 and CVE-2026-43500, targeting the kernel's page cache handling.
  • Debian, AlmaLinux, and Fedora are among the distributors releasing patches for Dirty Frag.
  • Organizations are urged to apply patches immediately to protect their systems.