Exploited in the Wild: “Dirty Frag” Linux Vulnerability Grants Instant Root Access

Dirty Frag is a critical Linux local privilege escalation vulnerability affecting esp4, esp6, and rxrpc kernel modules (tracked as CVE-2026-43284 and CVE-2026-43500). Proof-of-concept exploits are circulating in the wild and the flaw allows an attacker with initial local access (SSH, web shell, container escape, or low-privileged account) to reliably escalate to root, evade detection, and persist across major enterprise distributions; recommended mitigations include disabling unused modules, assessing IPsec/esp impact, hardening local/container access, and verifying system integrity after suspected exploitation.