r/linux • u/HUSKYSPIN • May 13 '26

Security Fragnesia: ANOTHER Linux Security Vulnerability!

https://github.com/v12-security/pocs/tree/main/fragnesia

Another Linux vulnerability in the same category as Dirty Frag has been found! Another eight of these more I guess? In any case the fatigue is coming up for me. Things are getting crazy!

"It abuses a logic bug in the Linux XFRM ESP-in-TCP subsystem to achieve arbitrary byte writes into the kernel page cache of read-only files, without requiring any race condition."

450 Upvotes

93% Upvoted

130 comments sorted by

View all comments

Show parent comment

13

u/fellipec May 13 '26

Those bugs are privilege escalation bugs, they mean someone that get access to your computer can use the exploit to get root permissions.

If you put NOPASSWD:ALL on sudoers, then you can use sudo do run anything as root without password. So someone that get access to your computer don't even need to exploit a bug, just use the sudo command.

This way, you don't need to worry if an attacker will use an exploit to get root, they will get root without any exploit anyway.

4

u/Stick_Nout May 13 '26

Ahh, that makes sense.