Red Hat Security Advisory: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * CVE-2026-46333 kernel: Read root-owned files as an unprivileged user * CVE-2026-46300 kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the NVIDIA for RHEL 10 Release Notes linked from the References section.
AI Analysis
Technical Summary
The Linux kernel packages in Red Hat Enterprise Linux for NVIDIA (RHEL 10) contain two security vulnerabilities. CVE-2026-46333 permits unprivileged users to read root-owned files, potentially exposing sensitive information. CVE-2026-46300, dubbed "Fragnesia," is a local privilege escalation vulnerability related to a variant of the Dirty Frag issue in the ESP/XFRM networking subsystem. Red Hat has issued a security advisory (RHSA-2026:19540) with updated kernel packages addressing these vulnerabilities. The update requires a system reboot to take effect. The advisory references additional details and release notes for NVIDIA for RHEL 10. The vulnerabilities are rated critical by Red Hat, although no CVSS scores are provided in the advisory.
Potential Impact
Successful exploitation of CVE-2026-46333 could allow an unprivileged user to read files owned by root, potentially leading to unauthorized disclosure of sensitive information. CVE-2026-46300 could enable a local attacker to escalate privileges to root via a vulnerability in the ESP/XFRM subsystem, compromising system integrity and control. Both vulnerabilities affect the Linux kernel core, which is critical to system security and stability.
Mitigation Recommendations
Red Hat has released updated kernel packages that address these vulnerabilities. Users should apply the kernel update provided in advisory RHSA-2026:19540 as soon as possible. A system reboot is required for the update to take effect. For detailed update instructions, refer to https://access.redhat.com/articles/11258. There are no indications that additional mitigations are necessary beyond applying the official patch and rebooting the system.
Red Hat Security Advisory: kernel security update
Description
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * CVE-2026-46333 kernel: Read root-owned files as an unprivileged user * CVE-2026-46300 kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the NVIDIA for RHEL 10 Release Notes linked from the References section.
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel packages in Red Hat Enterprise Linux for NVIDIA (RHEL 10) contain two security vulnerabilities. CVE-2026-46333 permits unprivileged users to read root-owned files, potentially exposing sensitive information. CVE-2026-46300, dubbed "Fragnesia," is a local privilege escalation vulnerability related to a variant of the Dirty Frag issue in the ESP/XFRM networking subsystem. Red Hat has issued a security advisory (RHSA-2026:19540) with updated kernel packages addressing these vulnerabilities. The update requires a system reboot to take effect. The advisory references additional details and release notes for NVIDIA for RHEL 10. The vulnerabilities are rated critical by Red Hat, although no CVSS scores are provided in the advisory.
Potential Impact
Successful exploitation of CVE-2026-46333 could allow an unprivileged user to read files owned by root, potentially leading to unauthorized disclosure of sensitive information. CVE-2026-46300 could enable a local attacker to escalate privileges to root via a vulnerability in the ESP/XFRM subsystem, compromising system integrity and control. Both vulnerabilities affect the Linux kernel core, which is critical to system security and stability.
Mitigation Recommendations
Red Hat has released updated kernel packages that address these vulnerabilities. Users should apply the kernel update provided in advisory RHSA-2026:19540 as soon as possible. A system reboot is required for the update to take effect. For detailed update instructions, refer to https://access.redhat.com/articles/11258. There are no indications that additional mitigations are necessary beyond applying the official patch and rebooting the system.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:19540
- Cve Count
- 2
- Additional Cves
- ["CVE-2026-46333"]
- Cvss Version
- null
Threat ID: 6a160958e29bf47b5061f2c3
Added to database: 05/26/2026, 20:58:00 UTC
Last enriched: 07/10/2026, 12:50:50 UTC
Last updated: 07/31/2026, 19:22:59 UTC
Views: 130
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.