Shared Fragment Marker Issue in Linux Kernel Network Functionality
CVE-2026-46300

7.8HIGH

Key Information:

Vendor

Linux

Status
Vendor
CVE Published:
23 May 2026

Badges

📈 Score: 242📰 News Worthy

What is CVE-2026-46300?

false

Affected Version(s)

Linux cef401de7be8c4e155c6746bfccf721a4fa5fab9 < 3599e6b3cc1ada96883d496a50a210d3afbb6987

Linux cef401de7be8c4e155c6746bfccf721a4fa5fab9 < 2f2b16022a2e10ca7bccfb98db5ed2ec0f72641c

Linux cef401de7be8c4e155c6746bfccf721a4fa5fab9 < 9d3e5fd19fe1063bf607219e8562fbd567b8e8d5

News Articles

Fragnesia Flaw Hands Linux Users Root Access: Third Kernel Bug in Two Weeks, Born From Patch

A newly disclosed Linux kernel flaw nicknamed Fragnesia — tracked as CVE-2026-46300 — lets any unprivileged local user gain root on essentially every major Linux distribution shipped before May 13,

Fragnesia Exposes Linux Kernel's Fragile Networking Code Yet Again

Fragnesia (CVE-2026-46300) delivers yet another local root exploit in the Linux kernel, exploiting XFRM ESP-in-TCP logic to write to read-only page cache. Following Dirty Frag by days, it forces rapid patching across distributions while exposing persistent weaknesses in networking and memory managem...

Fragnesia: New Linux kernel LPE bug was spawned by Dirty Frag patch (CVE-2026-46300) - IT Security News

Researchers have found and disclosed yet another local privilege escalation (LPE) vulnerability in the Linux kernel: CVE-2026-46300, aka “Fragnesia”. The flaw is in the same class of vulnerabilities as the recently disclosed Dirty Frag bug(s). Like Dirty Frag, it affects…Read more →

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • 📰

    First article discovered by Securityweek

  • Vulnerability Reserved

.