{"id":170863,"date":"2026-05-18T12:24:54","date_gmt":"2026-05-18T10:24:54","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-linux-raskryta-novaya-lpe-uyazvimost-fragnesia-pozvolyayushhaya-lokalnomu-polzovatelyu-poluchit-root"},"modified":"2026-05-18T12:24:54","modified_gmt":"2026-05-18T10:24:54","slug":"v-linux-raskryta-novaya-lpe-uyazvimost-fragnesia-pozvolyayushhaya-lokalnomu-polzovatelyu-poluchit-root","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/v-linux-raskryta-novaya-lpe-uyazvimost-fragnesia-pozvolyayushhaya-lokalnomu-polzovatelyu-poluchit-root","title":{"rendered":"Linuxis avastati uus LPE haavatavus Fragnesia, mis v\u00f5imaldab kohalikul kasutajal saada root-\u00f5igused","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Linuxi tuumoris avastati uus kohalik t\u00f5hususe suurendamise haavatavus, mille nimi on <strong>Fragnesia<\/strong> ja identifikaator <strong>CVE-2026-46300<\/strong>. Probleem kuulub samasse r\u00fcnnakute klassi page cache'is, nagu hiljuti arutatud Copy Fail ja Dirty Frag, kuid ei ole vana vea korduspublikatsioon: siin r\u00e4\u00e4gime eraldi puudusest koodis <strong>XFRM ESP-in-TCP<\/strong>.<\/p>\n<p>Haavatavuse avastas uurija <strong>William Bowling<\/strong> V12 Security meeskonnast <strong>. Avaldatud kirjelduse kohaselt v\u00f5imaldab Fragnesia mitteprivilegeeritud kohalikel kasutajatel muuta ainult lugemiseks m\u00f5eldud failide sisu page cache'is ja selle t\u00f5ttu k\u00e4ivitada koodi root'i \u00f5igustega. Erinevalt paljusid vanadest LPE-exploit'idest ei vaja r\u00fcnnak v\u00f5idu ja uurijate s\u00f5nul on see m\u00e4\u00e4ratletud kui deterministlik.<\/strong>Tehniliselt on probleem seotud sellega, et v\u00f5rgu puhvers\u00fcsteeme \u00fchendades v\u00f5is tuum kaotada m\u00e4rgi, et andmefragment on \"\u00fchine\" ja seotud v\u00e4lise m\u00e4lu lehega, sealhulgas page cache'iga. Pakutud plaastris on see kirjeldatud kui viga skb_try_coalesce(): kui paged fragments kantakse \u00fchest sk_buff'ist teise, ei s\u00e4ilitatud flag'i SKBFL_SHARED_FRAG. Seet\u00f5ttu v\u00f5is hilisem ESP kood ekslikult arvata, et puhver on muutmiseks ohutu.<\/p>\n<p>Kasutuslik efekt seisneb selles, et andmed, mis pandi varem TCP-j\u00e4rjekorda failist, v\u00f5isid p\u00e4rast sokli l\u00fclitamist espintcp-re\u017eiimi tuuma poolt ESP-\u0161ifritena t\u00f6\u00f6delda. AES-GCM dekr\u00fcpteerimisel muutsid baitide otseselt page cache'is lehega seotud failis. See ei muuda faili ketas, kuid muudab selle esitlemist m\u00e4lus kuni lehe v\u00e4ljaviskamiseni vahem\u00e4lust.<\/p>\n<p>Avaldatud r\u00fcnnaku demonstreerimisel kasutati sihtm\u00e4rkidena \"\/usr\/bin\/su\": exploit muutsid binaarfaili esimesi bite page cache'is ja seej\u00e4rel k\u00e4ivitasid muudetud m\u00e4lus koopia, saades shell'i root'i \u00f5igustega. Algne fail ketas j\u00e4i samas muutumatuks, mis muudab probleemi diagnostika jaoks eriti ebameeldivaks: ekspluateerimisj\u00e4ljed v\u00f5ivad p\u00e4rast page cache'i puhastamist v\u00f5i taask\u00e4ivitamist kaduda.<\/p>\n<p>K\u00e4ideldud, et see muutsid binaarfaili esimesed bite page cache'is ja seej\u00e4rel k\u00e4ivitasid muudetud m\u00e4lu koopia, saades shell'i root'i \u00f5igustega. Algne fail ketas j\u00e4i samas muutumatuks, mis muudab probleemi diagnostika jaoks eriti ebameeldivaks: ekspluateerimisj\u00e4ljed v\u00f5ivad p\u00e4rast page cache'i puhastamist v\u00f5i taask\u00e4ivitamist kaduda.<\/p>\n<p>Fragnesia ilmus v\u00e4hem kui n\u00e4dal p\u00e4rast Dirty Frag'i. V12 r\u00f5hutab, et see on eraldi viga samas r\u00fcndet\u00fc\u00fcbis \u2014 ESP\/XFRM, \u2014 mitte juba parandatud haavatavuse \u00fcmbernimetamine. Phoronix m\u00e4rkis ka, et artikli avaldamise ajal oli olemas t\u00f5endi m\u00f5isted, ja parandus koosnes v\u00e4ikesest plaastrist faili net\/core\/skbuff.c, mis ei ole kohe peamistes tuhanidesse j\u00f5udnud.<\/p>\n<p> <noindex><noindex><\/p>\n<p>Canonical m\u00e4\u00e4ras <a rel=\"nofollow\" href=\"https:\/\/ubuntu.com\/security\/CVE-2026-46300\">CVE-2026-46300<\/a> k\u00f5rge prioriteedi Ubuntu jaoks, tuues v\u00e4lja p\u00f5hjuseks \"triviaalse kohaliku \u00f5iguste t\u00f5usu\". Ubuntu Turvateenuste lehelt, mis k\u00e4sitleb puudutatud kernaleid, oli 13. mai seisuga m\u00e4rgitud olek \"Vajab hindamist\", ning m\u00e4rkuses \u00f6eldi eraldi, et probleem esineb ka kernel ESP-modulis ja seda saab ajutiselt leevendada sama meetodiga nagu Dirty Frag.<\/p>\n<p><\/noindex><\/noindex> <noindex><\/p>\n<p><a rel=\"nofollow\" href=\"https:\/\/security-tracker.debian.org\/tracker\/CVE-2026-46300\">Debian Security Tracker<\/a> kontrollimise ajal m\u00e4rkis, et bullseye, bookworm, trixie, forky ja sid harude kernelid on haavatavad; unstable'i linux paketi jaoks ei olnud fikseeritud versioon veel m\u00e4\u00e4ratud.<\/p>\n<p><\/noindex> <noindex><\/p>\n<p>Ajutine kaitsemeede j\u00e4\u00e4b samaks nagu Dirty Frag'i puhul: <a rel=\"nofollow\" href=\"https:\/\/blog.cloudlinux.com\/fragnesia-mitigation-and-kernel-update\">keelata moodulite laadimine<\/a> esp4, esp6 ja rxrpc, kui need pole s\u00fcsteemile vajalikud. See v\u00f5ib rikkuda IPsec t\u00fcnnide toimimist masinates, kus kasutatakse kernel ESP, strongSwan, Libreswan v\u00f5i sarnaseid konfiguratsioone, seet\u00f5ttu tuleks VPN-k\u00e4ikude puhul seda meedet kasutada alles p\u00e4rast tagaj\u00e4rgede hindamist.<\/p>\n<p><\/noindex> <\/p>\n<p>Ajutine leevenduse n\u00e4ide administraatoritele:<\/p>\n<p> sudo sh -c \"printf 'install esp4 \/bin\/falseninstall esp6 \/bin\/falseninstall rxrpc \/bin\/falsen' &gt; \/etc\/modprobe.d\/dirtyfrag.conf\" sudo rmmod esp4 esp6 rxrpc 2&gt;\/dev\/null || true   <\/p>\n<p>Kui on kahtlus, et s\u00fcsteem on juba r\u00fcnnaku all olnud, siis moodulite blokeerimine ei piisa: kuna avalik demonstraatsioon muudab t\u00e4pselt tegevfaili page cache'is, soovitavad administraatorid puhastada lehe vahem\u00e4lu v\u00f5i s\u00fcsteemi taask\u00e4ivitada p\u00e4rast kaitsemeetmete rakendamist. CloudLinux m\u00e4rgib selgelt, et p\u00e4rast ekspluateerimist v\u00f5ib \/usr\/bin\/su j\u00e4\u00e4da m\u00e4llu muudetuks kuni vastavate lehtede v\u00e4ljaheitlemiseni.<\/p>\n<p>Ajutise reegli eemaldamiseks p\u00e4rast fikseeritud kerneli installimist saab eemaldada loodud faili:<\/p>\n<p> sudo rm \/etc\/modprobe.d\/dirtyfrag.conf    <\/p>\n<p>Peamine soovitus j\u00e4\u00e4b standardseks: installige oma levituste korrigeeritud kernel ja taask\u00e4ivitage s\u00fcsteem. Enne v\u00e4rskendamist on suurima riski all mitme kasutaja serverid, CI-jooksjad, jagatud majutus, konteinerite ehitusfarmid ja k\u00f5ik masinad, kus mitteprivilegeeritud v\u00f5i osaliselt usaldusv\u00e4\u00e4rsed kasutajad saavad k\u00e4itada kohalikke koode.<\/p>\n<p>Allikas: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/news\/security\/18292778\">linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u044f\u0434\u0440\u0435 Linux \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 Fragnesia \u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2026-46300. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u0442\u043e\u043c\u0443 \u0436\u0435 \u043a\u043b\u0430\u0441\u0441\u0443 \u0430\u0442\u0430\u043a \u043d\u0430 page cache, \u0447\u0442\u043e \u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u0441\u0443\u0436\u0434\u0430\u0432\u0448\u0438\u0435\u0441\u044f Copy Fail \u0438 Dirty Frag, \u043d\u043e \u043d\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0441\u0442\u0430\u0440\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438: \u0440\u0435\u0447\u044c \u0438\u0434\u0451\u0442 \u043e\u0431 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u043c \u0434\u0435\u0444\u0435\u043a\u0442\u0435 \u0432 \u043a\u043e\u0434\u0435 XFRM ESP-in-TCP. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c William Bowling [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-170863","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u044f\u0434\u0440\u0435 Linux \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 Fragnesia \u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2026-46300.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Erik Peterson\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/news\/v-linux-raskryta-novaya-lpe-uyazvimost-fragnesia-pozvolyayushhaya-lokalnomu-polzovatelyu-poluchit-root\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412 Linux \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u043d\u043e\u0432\u0430\u044f LPE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Fragnesia, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u044f\u0434\u0440\u0435 Linux \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 Fragnesia \u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2026-46300.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/news\/v-linux-raskryta-novaya-lpe-uyazvimost-fragnesia-pozvolyayushhaya-lokalnomu-polzovatelyu-poluchit-root\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-05-18T10:24:54+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-05-18T10:24:54+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Linuxis avastati uus LPE-haavatavus Fragnesia, mis v\u00f5imaldab kohalikel kasutajatel saada root-i \u00f5igused | ProHoster","description":"Linuxi tuumas avati uus kohaliku privileegide t\u00f5stmise haavatavus, mille nimeks on Fragnesia ja identifikaatoriks CVE-2026-46300.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/v-linux-raskryta-novaya-lpe-uyazvimost-fragnesia-pozvolyayushhaya-lokalnomu-polzovatelyu-poluchit-root","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Linux \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u043d\u043e\u0432\u0430\u044f LPE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Fragnesia, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root | ProHoster","og:description":"\u0412 \u044f\u0434\u0440\u0435 Linux \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 Fragnesia \u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2026-46300.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/v-linux-raskryta-novaya-lpe-uyazvimost-fragnesia-pozvolyayushhaya-lokalnomu-polzovatelyu-poluchit-root","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-18T10:24:54+00:00","article:modified_time":"2026-05-18T10:24:54+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/170863","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=170863"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/170863\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=170863"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=170863"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=170863"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}