{"id":170863,"date":"2026-05-18T12:24:54","date_gmt":"2026-05-18T10:24:54","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-linux-raskryta-novaya-lpe-uyazvimost-fragnesia-pozvolyayushhaya-lokalnomu-polzovatelyu-poluchit-root"},"modified":"2026-05-18T12:24:54","modified_gmt":"2026-05-18T10:24:54","slug":"v-linux-raskryta-novaya-lpe-uyazvimost-fragnesia-pozvolyayushhaya-lokalnomu-polzovatelyu-poluchit-root","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/v-linux-raskryta-novaya-lpe-uyazvimost-fragnesia-pozvolyayushhaya-lokalnomu-polzovatelyu-poluchit-root","title":{"rendered":"Linuxis on avastatud uus LPE-haavatavus Fragnesia, mis v\u00f5imaldab kohalikel kasutajatel saada root-juurdep\u00e4\u00e4su.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Linuxi tuumas avastati uus kohalikuks \u00f5iguste t\u00f5stmiseks m\u00f5eldud haavatavus, mille nimeks on Fragnesia<\/strong> ja identifikaator CVE-2026-46300<\/strong>. Probleem kuulub samasse r\u00fcnnakute klassi page cache'i osas nagu hiljuti arutatud Copy Fail ja Dirty Frag, kuid ei ole vana vea korduvavaldamine: tegemist on eraldi defektiga koodis XFRM ESP-in-TCP<\/strong>.<\/p>\n

Haavatavuse avastas uurija William Bowling<\/strong> V12 Security meeskonnast. . Avaldatud kirjelduse kohaselt v\u00f5imaldab Fragnesia mittesoovitatud kohalikel kasutajatel muuta ainult lugemiseks m\u00f5eldud failide sisu m\u00e4lu page cache'is ning seel\u00e4bi k\u00e4ivitada koodi root'i \u00f5igustes. Erinevalt paljusid vanemaid LPE eksploiditud, ei vaja r\u00fcnnak v\u00f5idujooksu ja on uurijate poolt kirjeldatud kui m\u00e4\u00e4ratletud.<\/strong>. Avaldatud kirjelduse kohaselt v\u00f5imaldab Fragnesia mitteprivileegitud kohalikel kasutajatel muuta ainult lugemiseks saadavalate failide sisu page cache'is, v\u00f5imaldades seel\u00e4bi koodi k\u00e4ivitamist root-i \u00f5igustes. Erinevalt paljusid vanadest LPE ekspluatatsioonidest, ei n\u00f5ua r\u00fcnnak v\u00f5istlust ja uurijate s\u00f5nul on see determiniistlik.<\/p>\n

Tehniline probleem seisneb selles, et v\u00f5rgu puhvrid \u00fchendades v\u00f5is tuum kaotada m\u00e4rgi, et andmefragment on \"\u00fchine\" ja seotud v\u00e4lise m\u00e4lu lehega, sealhulgas page cache'iga. Pakutud patch'is on see kirjeldatud vea kujul skb_try_coalesce(): paged fragmentide \u00fcleviimisel \u00fchest sk_buff'ist teise ei s\u00e4ilinud lipp SKBFL_SHARED_FRAG. Selle tulemusena v\u00f5is hiljem kodeeritud ESP ekslikult pidada puhvrid muudetavaks.<\/p>\n

Praktiline efekt seisneb selles, et andmed, mis olid varem TCP-j\u00e4rjekorda aknast saadetud, v\u00f5isid p\u00e4rast sokli vahetamist espintcp re\u017eiimi kirja pandud koodi t\u00f6\u00f6tlemise k\u00e4igus tuuma poolt ESP-salattekstina k\u00e4sitletud. AES-GCM-dekr\u00fcpteerimise k\u00e4igus muudetakse bait otse page cache'is, mis on seotud failiga. See ei muuda faili kettal, kuid muudab selle esitlust m\u00e4lus kuni lehe k\u00fctusevahetuseni.<\/p>\n

Avaldatud r\u00fcnnaku demotesioonis kasutati sihtm\u00e4rgina \/usr\/bin\/su: eksploit muutis binaarfaili esimesi baite page cache'is ja seej\u00e4rel k\u00e4ivitas muudetud m\u00e4lu koopiana, saades root \u00f5igustega shell'i. Algne fail kettal j\u00e4i seejuures muutumatuks, mis teeb probleemi diagnoosimise eriti keeruliseks: ekspluateerimise j\u00e4ljed v\u00f5ivad kaduda p\u00e4rast page cache'i puhastamist v\u00f5i taask\u00e4ivitamist.<\/p>\n

Fragnesia ilmnes v\u00e4hem kui n\u00e4dal p\u00e4rast Dirty Frag'i. V12 r\u00f5hutab, et see on eraldi viga samas r\u00fcnnaku pinnas \u2014 ESP\/XFRM, \u2014 mitte juba parandatud haavatavuse \u00fcmbernimetamine. Phoronix m\u00e4rgib ka, et avaldamise ajal oli olemas t\u00f5end konseptsiooni kohta, ning parandus oli v\u00e4ike patch net\/core\/skbuff.c, mis ei j\u00f5udnud kohe p\u00f5hiv\u00f5rkudesse.<\/p>\n

<\/p>\n

Canonical m\u00e4\u00e4ras CVE-2026-46300<\/a> k\u00f5rge prioriteedi Ubuntu jaoks, \u00f6eldes p\u00f5hjuseks \u00abtriviaalne kohalik privileegide t\u00f5us\u00bb. Ubuntu turvalisuse lehelt m\u00f5jutatud tuumade osas oli 13. mai uuenduse seisund \u00abVajad hindamist\u00bb, ning m\u00e4rkuses \u00f6eldakse eraldi, et probleem on samuti ESP-mooduli tuumas ja v\u00f5ib olla ajutiselt leevendatud sama viisi abil nagu Dirty Frag.<\/p>\n

<\/noindex><\/noindex> <\/p>\n

Debian Security Tracker<\/a> kontrollimise hetkeks olid haavatavad tuumad t\u00e4histatud haruates bullseye, bookworm, trixie, forky ja sid; linuxi paketi jaoks unstable'is pole kindlat versiooni veel m\u00e4\u00e4ratud.<\/p>\n

<\/noindex> <\/p>\n

Ajutine kaitsemeede j\u00e4\u00e4b samaks kui Dirty Frag jaoks: keela moodulite laadimine<\/a> esp4, esp6 ja rxrpc, kui need ei ole s\u00fcsteemile vajalikud. See v\u00f5ib rikkuda IPsec-tunnelite toimimist nodides, kus kasutatakse kernel ESP, strongSwan, Libreswan v\u00f5i sarnaseid konfiguratsioone, seet\u00f5ttu tuleb VPN-l\u00fc\u00fcsidel sellist meedet rakendada ainult p\u00e4rast tagaj\u00e4rgede hindamist.<\/p>\n

<\/noindex> <\/p>\n

Ajutise leevenduse n\u00e4ide administraatoritele:<\/p>\n

sudo sh -c \"printf 'install esp4 \/bin\/falseninstall esp6 \/bin\/falseninstall rxrpc \/bin\/falsen' > \/etc\/modprobe.d\/dirtyfrag.conf\" sudo rmmod esp4 esp6 rxrpc 2>\/dev\/null || true <\/p>\n

Kui on kahtlus, et s\u00fcsteem on juba r\u00fcnnaku all olnud, siis moodulite blokeerimine ei piisa: kuna avalik demonstreerimine muudab t\u00e4pselt page cache'is teostusfaili, soovitavad administraatorid puhastada lehek\u00fcljekesi v\u00f5i taask\u00e4ivitada s\u00fcsteem p\u00e4rast kaitsemeetmete rakendamist. CloudLinux r\u00f5hutab, et p\u00e4rast \/usr\/bin\/su kasutamist v\u00f5ib m\u00e4lu j\u00e4\u00e4da muutunuks kuni vastavate lehek\u00fclgede v\u00e4lja t\u00f5stmiseni.<\/p>\n

Ajutise reegli eemaldamiseks p\u00e4rast parandatud tuuma installimist v\u00f5ite kustutada loodud faili:<\/p>\n

sudo rm \/etc\/modprobe.d\/dirtyfrag.conf <\/p>\n

Peamine soovitus j\u00e4\u00e4b tavaliseks: installida taastatud tuum oma distributsioonilt ja taask\u00e4ivitada s\u00fcsteem. Enne v\u00e4rskendamist on suurim risk mitme kasutaja serveridel, CI-jooksjatel, jagatud hostimisel, konteinerite ehitustalude ja k\u00f5igi masinate puhul, kus tavakasutajad v\u00f5i osaliselt usaldusv\u00e4\u00e4rsed kasutajad saavad k\u00e4ivitada kohalikke koode.<\/p>\n

Allikas: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u044f\u0434\u0440\u0435 Linux \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 Fragnesia \u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2026-46300. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u0442\u043e\u043c\u0443 \u0436\u0435 \u043a\u043b\u0430\u0441\u0441\u0443 \u0430\u0442\u0430\u043a \u043d\u0430 page cache, \u0447\u0442\u043e \u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u0441\u0443\u0436\u0434\u0430\u0432\u0448\u0438\u0435\u0441\u044f Copy Fail \u0438 Dirty Frag, \u043d\u043e \u043d\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0441\u0442\u0430\u0440\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438: \u0440\u0435\u0447\u044c \u0438\u0434\u0451\u0442 \u043e\u0431 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u043c \u0434\u0435\u0444\u0435\u043a\u0442\u0435 \u0432 \u043a\u043e\u0434\u0435 XFRM ESP-in-TCP. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c William Bowling […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-170863","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Linuxis on avastatud uus LPE-haavatavus Fragnesia, mis v\u00f5imaldab kohalikul kasutajal saada root \u00f5igusi | ProHoster","description":"Linuxi tuumas on avastatud j\u00e4rgmine kohaliku privileegi t\u00f5stmise haavatavus nimega Fragnesia, mille identifikaator on CVE-2026-46300. Probleem kuulub samasse r\u00fcnnakute klassi page cache'i vastu, mis h\u00f5lmab hiljuti arutatud Copy Faili ja Dirty Fragi, kuid ei ole vana vea kordustr\u00fckk: teema on eraldiseisev defekt XFRM ESP-in-TCP koodis. Haavatavuse avastas uurija William Bowling.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/v-linux-raskryta-novaya-lpe-uyazvimost-fragnesia-pozvolyayushhaya-lokalnomu-polzovatelyu-poluchit-root","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Linux \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u043d\u043e\u0432\u0430\u044f LPE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Fragnesia, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root | ProHoster","og:description":"\u0412 \u044f\u0434\u0440\u0435 Linux \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 Fragnesia \u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2026-46300. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u0442\u043e\u043c\u0443 \u0436\u0435 \u043a\u043b\u0430\u0441\u0441\u0443 \u0430\u0442\u0430\u043a \u043d\u0430 page cache, \u0447\u0442\u043e \u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u0441\u0443\u0436\u0434\u0430\u0432\u0448\u0438\u0435\u0441\u044f Copy Fail \u0438 Dirty Frag, \u043d\u043e \u043d\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0441\u0442\u0430\u0440\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438: \u0440\u0435\u0447\u044c \u0438\u0434\u0451\u0442 \u043e\u0431 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u043c \u0434\u0435\u0444\u0435\u043a\u0442\u0435 \u0432 \u043a\u043e\u0434\u0435 XFRM ESP-in-TCP. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c William Bowling","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/v-linux-raskryta-novaya-lpe-uyazvimost-fragnesia-pozvolyayushhaya-lokalnomu-polzovatelyu-poluchit-root","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-18T10:24:54+00:00","article:modified_time":"2026-05-18T10:24:54+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/170863","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=170863"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/170863\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=170863"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=170863"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=170863"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}