Fragnesia Local Privilege Escalation report via ESP-in-TCP in the Linux Kernel

unknownCVE-2026-46300 CVE-2026-43284

Bulletin ID: 2026-029-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 05/13/2026 18:45 PM PDT This is an ongoing issue. Information is subject to change. Please refer to our Security Bulletin (ID: 2026-030-AWS) for the most updated patching information. Description: Amazon is aware of CVE-2026-46300, a report of an additional privilege escalation issue in the Linux kernel related to the DirtyFrag, copy.fail class of issues (CVE-2026-43284). The proof of concept uses a vector via the loadable module espintcp. Amazon Linux does not provide this module, and is not affected. As defense in depth we will include a correctness patch to the core networking code to harden against possible similar issues in network protocol implementations that rely on this behavior.

CSIRTS triage

vendor: Linux product: Linux Kernel Privilege escalation

What: A privilege escalation vulnerability related to the DirtyFrag issue has been reported.
Who is affected: Users of affected Linux kernel versions.
Urgency: Remediation is important as it may allow privilege escalation.
Action: Apply the latest patches for the Linux kernel.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Linux Kernel

Get an email when a new Linux Kernel advisory drops — max one per day, one-click unsubscribe.

Details

Source: AWS Security Bulletins (INTL · vendor-psirt · site)
Severity: unknown
Published: 2026-06-05
Exploitation: Not in CISA KEV at last sync

Original advisory: https://aws.amazon.com/security/security-bulletins/rss/2026-029-aws/

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Moderate exploitation riskCVE-2026-463003.7% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 88% of all scored CVEs.
Exploitation likely imminentCVE-2026-43284EPSS puts this in the most-targeted tier (93.2% 30-day exploitation probability). Prioritize alongside KEV items. Riskier than 100% of all scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-46300	coverage & exploitation status	NVD · CVE.org
CVE-2026-43284	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

high[UPDATE] [high] Linux Kernel: Multiple vulnerabilitiescert-bund
high[UPDATE] [high] Linux Kernel (Dirty Frag): Multiple vulnerabilities allow gaining administrator rightscert-bund
high[UPDATE] [high] Linux Kernel (Fragnesia): Vulnerability Allows Gaining Administrator Rightscert-bund
unknownUSN-8530-1: Linux kernel (AWS) vulnerabilitiesubuntu
unknownexploitedUSN-8528-1: Linux kernel (Xilinx ZynqMP) vulnerabilitiesubuntu
unknownMultiple vulnerabilities in SUSE Linux kernel (July 10, 2026)cert-fr-avis
unknownMultiple vulnerabilities in Red Hat Linux kernel (July 10, 2026)cert-fr-avis
unknownMultiple vulnerabilities in SUSE Linux kernel (July 3, 2026)cert-fr-avis
unknownMultiple vulnerabilities in Red Hat Linux kernel (July 3, 2026)cert-fr-avis
unknownRedHat Linux Kernel Multiple Vulnerabilitieshkcert
unknownMultiple vulnerabilities in the SUSE Linux kernel (June 26, 2026)cert-fr-avis
unknownMultiple vulnerabilities in the Ubuntu Linux kernel (June 26, 2026)cert-fr-avis