Story perspectives

Dirty Frag Linux Flaw Lets Users Gain Root — Patch Now

5/12/2026

Summary

Story summary

Researchers disclosed the “Dirty Frag” Linux flaw that lets low-privilege users gain root on servers.
Hyunwoo Kim linked the flaw to CVE-2026-43284 and CVE-2026-43500 and said a proof-of-concept exploit leaked three days ago runs on virtually all Linux distributions.
The lack of applied kernel patches—though Debian, AlmaLinux and Fedora released fixes—prompted Microsoft to observe attackers testing Dirty Frag and Aviatrix to warn the exploit poses a threat, urging patching.

1 of 1

Story summary

Researchers disclosed the “Dirty Frag” Linux flaw that lets low-privilege users gain root on servers.
Hyunwoo Kim linked the flaw to CVE-2026-43284 and CVE-2026-43500 and said a proof-of-concept exploit leaked three days ago runs on virtually all Linux distributions.
The lack of applied kernel patches—though Debian, AlmaLinux and Fedora released fixes—prompted Microsoft to observe attackers testing Dirty Frag and Aviatrix to warn the exploit poses a threat, urging patching.