Published: May 13, 2026 • RHSB-2026-003 (Red Hat Security Bulletin) ↗
Vulnerability Details
| CVE | CVE-2026-46300 — Fragnesia variant |
| Variant of | Dirty Frag — Linux Kernel Networking Subsystem Privilege Escalation (previously announced — CVE-2026-43284, CVE-2026-43500) |
| Severity | Important |
| Patch Status | Not yet released |
| Mitigation Available | Yes — see below |
| Reference | https://access.redhat.com/security/vulnerabilities/RHSB-2026-003 |
Summary
A new variant of the Dirty Frag Linux kernel vulnerability has been identified, designated Fragnesia (CVE-2026-46300). This is part of the same family of privilege escalation flaws in the Linux kernel networking subsystem covered in our previous announcement.
Previously announced: The original Dirty Frag vulnerabilities (CVE-2026-43284 and CVE-2026-43500) were covered in an earlier notice. This update specifically addresses the newly identified Fragnesia variant (CVE-2026-46300), which falls under the same Red Hat security bulletin and is mitigated by the same command.
Recommended Mitigation
If you manage your own Linux server, the same mitigation that covers the original Dirty Frag vulnerabilities also protects against the Fragnesia variant (CVE-2026-46300). Run the following command as root:
sh -c "printf 'install esp4 /bin/false\ninstall esp6 /bin/false\ninstall rxrpc /bin/false\n' > /etc/modprobe.d/dirtyfrag.conf; rmmod esp4 esp6 rxrpc 2>/dev/null; true"
This blocklists the vulnerable kernel modules (esp4, esp6, rxrpc) and persists across reboots. To revert, remove /etc/modprobe.d/dirtyfrag.conf.
