New Linux Local Privilege Escalation Vulnerability ‘Fragnesia’ Disclosed with Patch Pending

A new Linux vulnerability named Fragnesia has been publicly disclosed, following in the footsteps of previous flaws like Dirty Frag. The bug allows local attackers to perform arbitrary byte writes into the kernel page cache of read-only files by exploiting a flaw in the ESP/XFRM logic. Proof-of-concept code has already been released, highlighting the urgency for mitigation. Linux developers have prepared a two-line patch in skbuff.c to address the issue, though it has not yet been included in mainline kernel releases. Users applying the previous Dirty Frag mitigations may have partial protection, but the patch must be applied for complete security. The disclosure timing aimed to prevent back-engineering prior to release, but raises concerns about the speed at which downstream distributions will implement the fix. Community reactions reflect ongoing debates about open source security, disclosure practices, and the challenges of patching non-trivial kernel issues. Some suggest temporary module blacklisting as a general mitigation, while others highlight the need for a module whitelist generated from active modules. While Fragnesia is a local privilege escalation issue, its discovery reinforces the importance of proactive kernel security measures and timely patch management across Linux systems.