CVE-2026-46300, nicknamed Fragnesia, is a high-severity local privilege escalation flaw in the Linux kernel’s XFRM ESP-in-TCP subsystem. It allows arbitrary byte writes into the kernel page cache of read-only files, enabling attackers to overwrite kernel structures or code sections and potentially gain full root access. The vulnerability stems from a flaw in skb_try_coalesce() where the…

Continue Reading