Thoughts on Dirty Frag

On May 7, 2026, Hyunwoo Kim ( @v4bel ) publicly disclosed a new Linux kernel vulnerability class dubbed Dirty Frag . The disclosure chains two CVEs, CVE-2026-43284 (xfrm-ESP Page-Cache Write) and CVE-2026-43500 (RxRPC Page-Cache Write), to achieve universal local privilege escalation across every major distribution. The embargo was broken by external factors before patches existed, and the…