Newly disclosed "Dirty Frag" vulnerability left Linux exposed for nearly a decade

Researchers disclosed Dirty Frag, a critical Linux local privilege-escalation flaw that can chain two page-cache write bugs to gain reliable root access.

The issue affects many major distributions, including Ubuntu, RHEL, Fedora, and openSUSE, and is tracked as CVE-2026-43284 and CVE-2026-43500.

No fix is available yet, so administrators are using a workaround that removes vulnerable kernel modules to reduce exposure.

The mitigation can also disable some network and file-system capabilities, making it a temporary but disruptive defense.