Red Hat Security Advisory: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-46300) * kernel: Read root-owned files as an unprivileged user (CVE-2026-46333) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
AI Analysis
Technical Summary
The Linux kernel packages in Red Hat Enterprise Linux 10.0 Extended Update Support contain two security vulnerabilities. CVE-2026-46300 ("Fragnesia") is a variant of the Dirty Frag vulnerability affecting the ESP/XFRM subsystem, leading to local privilege escalation. CVE-2026-46333 allows unprivileged users to read files owned by root. Red Hat has released a security update to address these issues, requiring a system reboot to apply the fixes. The advisory references Red Hat's errata RHSA-2026:20299 and provides links for applying the update.
Potential Impact
Successful exploitation of CVE-2026-46300 can lead to local privilege escalation, allowing a local attacker to gain higher privileges. CVE-2026-46333 enables an unprivileged user to read files owned by root, potentially exposing sensitive information. Both vulnerabilities impact confidentiality, integrity, and availability of the affected systems. The overall severity is high, reflecting the critical nature of privilege escalation and unauthorized data access.
Mitigation Recommendations
Red Hat has released an official security update for Red Hat Enterprise Linux 10.0 Extended Update Support that addresses these vulnerabilities. Users should apply the update as described in Red Hat advisory RHSA-2026:20299 and reboot the system for the changes to take effect. No additional mitigations are indicated by the vendor advisory.
Red Hat Security Advisory: kernel security update
Description
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-46300) * kernel: Read root-owned files as an unprivileged user (CVE-2026-46333) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVSS v3.1
Score 7.8high
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel packages in Red Hat Enterprise Linux 10.0 Extended Update Support contain two security vulnerabilities. CVE-2026-46300 ("Fragnesia") is a variant of the Dirty Frag vulnerability affecting the ESP/XFRM subsystem, leading to local privilege escalation. CVE-2026-46333 allows unprivileged users to read files owned by root. Red Hat has released a security update to address these issues, requiring a system reboot to apply the fixes. The advisory references Red Hat's errata RHSA-2026:20299 and provides links for applying the update.
Potential Impact
Successful exploitation of CVE-2026-46300 can lead to local privilege escalation, allowing a local attacker to gain higher privileges. CVE-2026-46333 enables an unprivileged user to read files owned by root, potentially exposing sensitive information. Both vulnerabilities impact confidentiality, integrity, and availability of the affected systems. The overall severity is high, reflecting the critical nature of privilege escalation and unauthorized data access.
Mitigation Recommendations
Red Hat has released an official security update for Red Hat Enterprise Linux 10.0 Extended Update Support that addresses these vulnerabilities. Users should apply the update as described in Red Hat advisory RHSA-2026:20299 and reboot the system for the changes to take effect. No additional mitigations are indicated by the vendor advisory.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:20299
- Cve Count
- 2
- Additional Cves
- ["CVE-2026-46333"]
- Cvss Version
- 3.1
Threat ID: 6a160959e29bf47b50620609
Added to database: 05/26/2026, 20:58:01 UTC
Last enriched: 07/10/2026, 12:51:14 UTC
Last updated: 07/31/2026, 19:22:59 UTC
Views: 313
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.