Dirty Frag Linux Vulnerability Lets Attackers Gain Root Privileges, PoC Released

A newly discovered Linux kernel vulnerability class named "Dirty Frag" enables deterministic local root escalation across many major distributions by chaining two page-cache write flaws (xfrm-ESP and RxRPC); a proof-of-concept was publicly released early, leaving systems exposed without official patches or CVE assignments. Administrators are advised to immediately mitigate exposure (e.g., block esp4/esp6/rxrpc modules) and monitor for unauthorized in-memory modifications until official kernel updates are released.