CNVD-2026-21361

Vulnerability from cnvd - Published: 2026-05-22
VLAI
Title
Linux Kernel Fragnesia权限提升漏洞
Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux Kernel Fragnesia存在权限提升漏洞，该漏洞是由于TCP子系统中的Linux XFRM ESP中逻辑错误引起的，该错误允许将任意字节写入只读文件的内核页面缓存。攻击者可利用该漏洞获得系统上的提升权限并获得根shell。
Severity
高
Patch Name
Linux Kernel Fragnesia权限提升漏洞的补丁
Patch Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux Kernel Fragnesia存在权限提升漏洞，该漏洞是由于TCP子系统中的Linux XFRM ESP中逻辑错误引起的，该错误允许将任意字节写入只读文件的内核页面缓存。攻击者可利用该漏洞获得系统上的提升权限并获得根shell。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description

厂商已发布了漏洞修复程序，请及时关注更新： https://github.com/v12-security/pocs/tree/main/fragnesia

Reference
https://github.com/v12-security/pocs/tree/main/fragnesia
Impacted products
Name
Linux Linux kernel
Show details on source website
To clipboard 

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2026-46300"
    }
  },
  "description": "Linux kernel\u662f\u7f8e\u56fdLinux\u57fa\u91d1\u4f1a\u7684\u5f00\u6e90\u64cd\u4f5c\u7cfb\u7edfLinux\u6240\u4f7f\u7528\u7684\u5185\u6838\u3002\n\nLinux Kernel Fragnesia\u5b58\u5728\u6743\u9650\u63d0\u5347\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u662f\u7531\u4e8eTCP\u5b50\u7cfb\u7edf\u4e2d\u7684Linux XFRM ESP\u4e2d\u903b\u8f91\u9519\u8bef\u5f15\u8d77\u7684\uff0c\u8be5\u9519\u8bef\u5141\u8bb8\u5c06\u4efb\u610f\u5b57\u8282\u5199\u5165\u53ea\u8bfb\u6587\u4ef6\u7684\u5185\u6838\u9875\u9762\u7f13\u5b58\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u83b7\u5f97\u7cfb\u7edf\u4e0a\u7684\u63d0\u5347\u6743\u9650\u5e76\u83b7\u5f97\u6839shell\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://github.com/v12-security/pocs/tree/main/fragnesia",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2026-21361",
  "openTime": "2026-05-22",
  "patchDescription": "Linux kernel\u662f\u7f8e\u56fdLinux\u57fa\u91d1\u4f1a\u7684\u5f00\u6e90\u64cd\u4f5c\u7cfb\u7edfLinux\u6240\u4f7f\u7528\u7684\u5185\u6838\u3002\r\n\r\nLinux Kernel Fragnesia\u5b58\u5728\u6743\u9650\u63d0\u5347\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u662f\u7531\u4e8eTCP\u5b50\u7cfb\u7edf\u4e2d\u7684Linux XFRM ESP\u4e2d\u903b\u8f91\u9519\u8bef\u5f15\u8d77\u7684\uff0c\u8be5\u9519\u8bef\u5141\u8bb8\u5c06\u4efb\u610f\u5b57\u8282\u5199\u5165\u53ea\u8bfb\u6587\u4ef6\u7684\u5185\u6838\u9875\u9762\u7f13\u5b58\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u83b7\u5f97\u7cfb\u7edf\u4e0a\u7684\u63d0\u5347\u6743\u9650\u5e76\u83b7\u5f97\u6839shell\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Linux Kernel Fragnesia\u6743\u9650\u63d0\u5347\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Linux  Linux kernel"
  },
  "referenceLink": "https://github.com/v12-security/pocs/tree/main/fragnesia",
  "serverity": "\u9ad8",
  "submitTime": "2026-05-22",
  "title": "Linux Kernel Fragnesia\u6743\u9650\u63d0\u5347\u6f0f\u6d1e"
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.