• The vulnerability, dubbed Dirty Frag, allows low-privilege users to gain root access on Linux systems.
  • It chains two kernel vulnerabilities (CVE-2026-43284 and CVE-2026-43500), with exploit code leaked three days ago.
  • Microsoft has reported signs of in-the-wild exploitation.
  • The exploit is deterministic and works across all major Linux distributions without crashes.
  • Distributions including Debian, AlmaLinux, and Fedora have already released patches.
  • Immediate patching is recommended despite the need for a reboot.