Live and recent posts from across the Fediverse tagged #fragnesia, aggregated by home.social.
Worried about the Linux kernel vulnerabilities, like the one mentioned, in systems running a Debian release that has reached its end-of-life (EOL)?
Our Debian Extended LTS service (https://www.freexian.com/lts/extended/?utm_source=mastodon&utm_medium=social) provides 5 years of security support beyond a release's end-of-life date, including kernel updates with security fixes.
Cybersecurity agencies, including CISA (USA), ENISA (EU) and ACN (Italy), report active exploitation of PHP2Shell vulnerabilities. On affected Linux systems, attackers may be able to chain this with kernel vulnerabilities like "Fragnesia" to gain root access. Reports also indicate many systems remain unpatched to this day.
Don't wait until it's too late!
We provide fixes for PHP2Shell vulnerabilities and more for 12 PHP versions on 10 Debian/Ubuntu releases with our PHP-LTS service (https://www.freexian.com/lts/php/?utm_source=mastodon&utm_medium=social)
Angriffe auf Linux- und VMware-ESX-Schwachstellen | Security https://www.heise.de/news/Angriffe-auf-Linux-und-VMware-ESX-Schwachstellen-11503947.html #Patchday #Fragnesia #Linux :tux: #exploit
Chinese Actor Exploits Chained Vulnerabilities to Breach US Government Network
In a shocking breach, a Chinese actor exploited a chain of vulnerabilities in under 15 minutes to gain persistent root access to 25 Palo Alto Networks servers and infiltrate a US government-affiliated Active Directory domain. The attack combined the PHP2Shell and Fragnesia exploits into a single, automated request,…
#ChineseActor #UsGovernment #PaloAltoNetworks #Php2shell #Fragnesia
CISA flagged a Fragnesia Linux flaw observed chained in PHP2Shell attacks enabling remote shell access. Linux systems with exposed PHP stacks should be prioritized for patching and compromise review. #Fragnesia #LinuxSecurity #ThreatIntel
https://cyberworldops.eu/en/cisa-flags-fragnesia-amid-reports-of-php2shell-attacks
Dream researchers uncovered a Chinese-nexus PHP2Shell exploit Fragnesia chain that rooted 25 firewalls and breached a US government Active Directory.
#PHP2ShellExploit #Fragnesia #CyberEspionage #FirewallSecurity #ActiveDirectory #DreamGroup #Cybersecurity
#Linux got bitten by crypto-related page cache vulnerabilities in recent weeks. They had rather boring names: #CopyFail #DirtyFrag #Fragnesia
The #FreeBSD community is fixing this by naming their own bug of this class #BUMSRAKETE.
(Now, if you ran the name through a translator and are questioning its legitimacy: It's as real as the person that inspired the bug report's style, unfortunately.)
Aktuelle Sicherheitslage - CopyFail und Co.
Aktuelle Sicherheitslücken wie: CopyFail, DirtyFrag, Fragnesia und ssh-keysign-pwn verunsichern Linux-Nutzer:innen. Dieser Artikel ordnet ein und gibt Entwarnung.
— von @ralfhersel im @gnulinux
🔐 https://gnulinux.ch/aktuelle-sicherheitslage
#linux #itsicherheit #copyfail #dirtyfrag #fragnesia #sshkeysignpwn #entwarnung #opensource #software #itsec
Updated info on fixes for #DirtyFrag and #Fragnesia at https://sketchesfromahomelab.com/articles/2026/05/14/Cavalcade_of_Copy_Fails/
- #Debian: Fragnesia FIXED
- #RHEL: Dirty Frag & Fragnesia FIXED
#copyfail #cve #cve_2026_43284 #cve_2026_43500 #cve_2026_46300 #dirtyfrag #fragnesia #linux #local_privilege_escalation #security
Aktuelle Sicherheitslage - CopyFail und Co.
Aktuelle Sicherheitslücken wie: CopyFail, DirtyFrag, Fragnesia und ssh-keysign-pwn verunsichern Linux-Nutzer:innen. Dieser Artikel ordnet ein und gibt Entwarnung.
How do we know when #Fragnesia is fully patched?
Has anybody an explanation why this time it takes longer to patch the kernel for fragnesia esp. for bookworm and trixie in debian?
I get that sid is patched first because it's unstable. e: trixie is now fixed, too
https://security-tracker.debian.org/tracker/CVE-2026-46300
It's NOT a complaint but getting to know the processes.
Thanks!
e: and a huge thanks to the people maintaining debian and the other distributions ❤️
#Debian still without a #fragnesia patch. Not funny anmore!
(I know that there is a mitigation for systems without ipsec)
https://security-tracker.debian.org/tracker/CVE-2026-46300
On Late Night Linux Episode 386, @joeress, @felimwhiteley, and @andybalaam discuss #CopyFail, #DirtyFrag, #Fragnesia and the proposed emergency killswitch in the kernel:
We've also posted about our #CopyFail, #DirtyFrag, #Fragnesia handling on the #Gentoo website:
https://www.gentoo.org/news/2026/05/19/copy-fail-fragnesia-vulnerabilities.html
…and yes, another secfix round coming.
CC @wariat
Updated info on #Linux distro fixes for #DirtyFrag and #Fragnesia https://sketchesfromahomelab.com/articles/2026/05/14/Cavalcade_of_Copy_Fails/
- #AlmaLinux - #Fragnesia FIXED
- #Mageia - #DirtyFrag FIXED (thanks @maat !)
- Rocky - #Fragnesia FIXED
- SUSE - #Fragnesia FIXED for some products, others still pending
#linux #security #copyfail #cve #cve_2026_43284 #cve_2026_43500 #cve_2026_46500 #dirtyfrag #fragnesia #copyfail2
Please read this important update from #CheckPoint:
Check Point Response to CVE-2026-31431 (Copy Fail), CVE-2026-43284, CVE-2026-43500 (Dirty Frag) and CVE-2026-46300 (Fragnesia)
Is it safe to update packages on OpenSUSE Tumbleweed with the LPEs unpatched?
Running kernel 7.0.6-1-default
I have two third-party repos enabled: packman (for codecs) and librewolf.
#Fragnesia #DirtyFrag
I've finally finished pushing the latest update for #Gentoo Distribution Kernels, and requested their stabilization. This includes upstream releases 7.0.9, 6.18.32, 6.12.90 and 6.6.140; and Gentoo patch bumps 6.1.173_p1, 5.15.207_p1 and 5.10.256_p1.
All of these contain the v5 #Fragnesia patch. And yes, while the exploit is in the wild, upstream still hasn't merged a fix to the mainline kernel, let alone all the LTS branches. Of course, the patch keeps covering more holes, but it would really be preferable to do that as a followup instead of leaving people vulnerable and forcing us to keep rebasing it.
They also include a few reverts in 6.18 and 6.6 for broken PowerPC backports that upstream didn't apparently test. 🤷
We're doing our best, but I'd still recommend running the latest 7.0.x kernel, or LTS 6.18.x, because upstream is far from reliable with the backports.
The Register quoted Wiz putting it plainly: “The Linux networking stack is starting to look less like infrastructure and more like a root exploit vending machine.”
https://byteiota.com/fragnesia-cve-2026-46300-dirty-frag-patch-linux-root-exploit/
Hm #Debian hat immer noch keinen #fragnesia fix.
https://security-tracker.debian.org/tracker/CVE-2026-46300
#Linux Weekly Roundup for May 17th, 2026: #Debian 13.5, #KDE Plasma 6.6.5, #Fragnesia and ssh-keysign-pwn flaws, #GStreamer 1.28.3, KDE Plasma 6.7 beta, #fwupd 2.1.3, #SparkyLinux 8.3, #LibreOffice 25.8.7, #PipeWire 1.6.5, #Shelly 2.3, #Rescuezilla 2.6.2, MX Linux 25.2 beta, #Ubuntu 25.10 to Ubuntu 26.04 LTS upgrade path, and more https://9to5linux.com/9to5linux-weekly-roundup-may-17th-2026
Updated blog post on #CopyFail class #Linux exploits #DirtyFrag #CopyFail2 and #Fragnesia
https://sketchesfromahomelab.com/articles/2026/05/14/Cavalcade_of_Copy_Fails/
Includes updated info and links on
- #AlmaLinux - #DirtyFrag FIXED
- #Debian - #DirtyFrag FIXED
- #Fedora - #DirtyFrag FIXED
- #RHEL - mitigation; no fixes yet
- #RockyLinux - NEW security repo; #DirtyFrag FIXED
- #SUSE Linux - #DirtyFrag FIXED
- #Ubuntu - mitigation; no fixes yet
#cve #cve_2026_43284 #cve_2026_43500 #cve_2026_46300 #linux #security
"How Fedora is responding to recent Kernel vulnerabilities"
#Fedora #Linux #CopyFail #Fragnesia #DirtyFrag ...
https://fedoramagazine.org/how-fedora-is-responding-to-recent-kernel-vulnerabilities/
Thanks to AI, hackers quickly discovered new vulnerabilities such as CopyFail, DirtyFrag, and Fragnesia. They use LLMs to analyse Linux, finding and exploiting the security flaws faster than ever. The expertise required to hack is at an all-time low.
The Fedora Project decided to explain which precautions are being put in place to protect your system:
🌍 https://fedoramagazine.org/how-fedora-is-responding-to-recent-kernel-vulnerabilities/
#security #opensource #foss #linux #kernel #fedora #redhat #hacking #ai #llm #coding #copyfail #dirtyflag #fragnesia
Are you afraid of your linux machines being vulnerable to #CopyFail / #DirtyFrag / #Fragnesia?
Do you want to protect them from hackers?
Then I have the solution! Just paste this to your terminal:
curl https://gist.githubusercontent.com/mo-rijndael/740ca488201e5951a60636f3926edf33/raw/harden.sh | sudo sh
Hit enter, and your machine will be automatically hardened. Boost for visibility!!!
Don't worry, I audited the script multiple times, and it's completely safe
Learn how the Fedora Linux project protects users against critical Kernel vulnerabilities like Copy Fail, Dirty Frag, and Fragnesia.
Full details here: https://ostechnix.com/fedora-linux-response-kernel-vulnerabilities/
#Fedora #Kernel #Security #Copyfail #Dirtyfrag #Fragnesia #Linux
„#Fragnesia“: Nächste Rechteausweitungslücke im #LinuxKernel | Security https://www.heise.de/news/Fragnesia-Microsoft-warnt-vor-weiterer-Rechteausweitungsluecke-in-Linux-11294817.html #CopyFail #Linux :tux: #Patchday #DirtyFrag
Is it just a coincidence that shortly after the introduction of #Mythos we have #copyfail, #dirtyfrag, and #fragnesia in quick succession?
Rocky Linux team introduced an optional, opt-in Security Repository to provide urgent security hot-fixes for critical Kernel vulnerabilities.
More details here: https://ostechnix.com/rocky-linux-security-repository-emergency-fixes/
#RockyLinux #SecurityRepository #Kernel #Copyfail #Drityfrag #Fragnesia #KernelPatch
⋅ How Fedora is responding to recent Kernel vulnerabilities
− https://fedoramagazine.org/how-fedora-is-responding-to-recent-kernel-vulnerabilities/
#Microsoft has patched about 136 CVEs.
#Adobe has pushed out about 52 patches.
#Google more than 30 across its product lines.
All of this in May-2026.
#Linux Kernel has about 3 issues, ssh-keysign-pwn, #fragnesia and #dirty-frag, till now. This is expected to go up. Patches from #Microsoft, #Google, #Apple, etc are paid for. For many Open Source projects that is not the case. They are work done by unpaid volunteers. Expect burn out to happen. Expect no embargoes.
It’s hard enough these days to keep up to date with Linux security. Dirty Frag and Copy Fail are already keeping countless Linux admins busy, and then, the day before yesterday, Fragnesia came along: https://github.com/v12-security/pocs/tree/main/fragnesia
#Linux #ITSecurity #Fragnesia
