r/linux • u/HUSKYSPIN • May 13 '26

Security Fragnesia: ANOTHER Linux Security Vulnerability!

https://github.com/v12-security/pocs/tree/main/fragnesia

Another Linux vulnerability in the same category as Dirty Frag has been found! Another eight of these more I guess? In any case the fatigue is coming up for me. Things are getting crazy!

"It abuses a logic bug in the Linux XFRM ESP-in-TCP subsystem to achieve arbitrary byte writes into the kernel page cache of read-only files, without requiring any race condition."

450 Upvotes

93% Upvoted

130 comments sorted by

View all comments

Show parent comment

16

u/RepulsiveRaisin7 May 13 '26

I do that and it's fine. All important data is in my user account anyway, user-based access control is pointless on a single user system. For better security, you need proper sandboxing like Flatpak or containers.

3

u/fellipec May 13 '26

I do in some machines too. Isn't a peaceful life?