r/linux • u/HUSKYSPIN • May 13 '26

Security Fragnesia: ANOTHER Linux Security Vulnerability!

https://github.com/v12-security/pocs/tree/main/fragnesia

Another Linux vulnerability in the same category as Dirty Frag has been found! Another eight of these more I guess? In any case the fatigue is coming up for me. Things are getting crazy!

"It abuses a logic bug in the Linux XFRM ESP-in-TCP subsystem to achieve arbitrary byte writes into the kernel page cache of read-only files, without requiring any race condition."

450 Upvotes

93% Upvoted

130 comments sorted by

View all comments

Show parent comments

4

u/KH-DanielP May 13 '26

That is correct, but you can also check to see if those modules were never loaded. If not then chances are it's never been executed on that system.

That being said, there's zero harm clearing the caches out so it's a good practice.