Fragnesia (CVE-2026-46300) is a local privilege escalation vulnerability in the Linux kernel's XFRM ESP-in-TCP subsystem. It enables an unprivileged attacker to gain root permissions by exploiting a memory write primitive to corrupt page cache memory of critical binaries such as /usr/bin/su or other user-readable files like /etc/passwd. This vulnerability is in the same class as Dirty Frag and Copy Fail, which also target kernel memory corruption to escalate privileges. While a proof-of-concept exploit is publicly available, no confirmed in-the-wild exploitation has been reported. Linux distributions have begun releasing patches to address this issue.

Successful exploitation of Fragnesia allows a local attacker to gain root privileges on affected Linux systems by modifying sensitive system files. This can lead to full system compromise. Although no active exploitation has been confirmed, the availability of a proof-of-concept exploit increases the risk. The vulnerability affects a majority of Linux distributions, indicating broad impact potential.

Patches addressing CVE-2026-46300 have been released by most Linux distributions. Organizations should apply these official patches as soon as possible to mitigate the risk of privilege escalation. Microsoft and other vendors have strongly recommended prompt patching. There is no indication that the vulnerability is already mitigated or that no action is required.