Dirty Frag: Unpatched Linux vulnerability delivers root access

Dirty Frag refers to two Linux kernel page-cache write vulnerabilities—an xfrm-ESP flaw (CVE-2026-43284, patched) and an RxRPC flaw (CVE-2026-43500, unpatched)—whose public PoCs and a disclosure leak raise the risk of local privilege escalation. Chaining the two flaws produces a reliable root escalation on most distributions; vendors are issuing kernel fixes while administrators are advised to mitigate by blacklisting or unloading affected modules until patched kernels are applied.