CVE-2026-43284
Named by 8 kept items in this workspace.
7 items name it under cves and 1 under classification.key entities.
Search every workspace for CVE-2026-43284. It matches the name as written, so it can find other things that share it.
The items that name it 8
Vulnerability in IPsec/XFRM ESP (encrypted VPN traffic) handling in the Linux kernel; part of the Dirty Frag set; allows writing to page cache via shared memory not being checked before writing, enabling privilege escalation to root. Affects supported Red Hat Enterprise Linux kernels and anything bu
DirtyFrag kernel vulnerability variant requiring xfrm-ESP; exploitable on Android but restricted by SELinux to system_server, network_stack, and netd domains. Disclosed 3 months prior to this page; still unpatched on AOSP and Pixel devices except beta QPR versions at time of writing.
One of two Dirty Frag vulnerabilities affecting xfrm-ESP and RxRPC submodules, overwriting the frag of struct sk_buff via zero-copy send path, causing page cache corruption of read-only files. Announced by researcher Hyunwoo Kim on May 7, 2026.
Linux kernel local privilege escalation vulnerability, part of the 'Dirty Frag' chain, exploiting the ESP (IPsec) subsystem
All cves in this workspace.