“Dirty Frag” Linux kernel vulnerabilities

Install / Update Security
1

I have come across a news of “Dirty Frag Linux kernel local privilege escalation vulnerability” a security flaw related to Linux Kernel. Following is the brief detail on this:

Two local privilege escalation (LPE) vulnerabilities affecting the Linux kernel have been publicly disclosed on May 7, 2026. One of the vulnerabilities has been assigned the ID: CVE-2026-43284. The other CVE ID is pending. Both are referred to as “Dirty Frag.” The affected components are Linux kernel modules. The first vulnerability impacts the modules that provide support for ESP (Encapsulating Security Protocol), one of the protocols used for IPsec (Internet Protocol Security). The second vulnerability impacts the modules that provide support for RxRPC, a protocol used for AFS (Andrew File System), a distributed file system. The vulnerabilities affect multiple Linux distributions, including all Ubuntu releases.

Please take needful action, If you are hosting your ERPNext on a self-managed datacenter/server with Linux OS.

2 Likes
2

Thanks for the alert :+1: @pioneerpathan

3

If you’re running ERPNext on Ubuntu, I’d jump on kernel patches as soon as they drop, because local bugs like this tend to get weaponized fast. I usually toss in a quick check to make sure no old ESP or AFS modules are hanging around loaded by mistake. A reboot after updating feels like a pain, but it beats chasing weird privilege issues later.