Local Privilege Escalation Vulnerability in Kernel Package - CVE-2026-43284
Summary
RLSA-2026:16062: Important: kernel security update. Affects kernel versions < 0:6.12.0-124.56.1.el10_1. Fixed in 0:6.12.0-124.56.1.el10_1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel package is a fundamental component of any Linux operating system, serving as the core interface between the hardware and software. It manages system resources, facilitates communication between hardware and software, and provides essential services for all other software applications. The kernel is critical for system stability and security, making it a prime target for vulnerabilities.
Vulnerability Detail
The vulnerability identified as CVE-2026-43284, dubbed 'Dirty Frag', is a universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel. This flaw allows an attacker with local access to escalate their privileges, potentially gaining unauthorized access to sensitive system resources and data. The implications of this vulnerability are severe, as it could lead to complete system compromise if exploited. The CVSS score for this vulnerability is 7.8, indicating a high level of risk.
How To Fix
Minimum fixed version
0:6.12.0-124.56.1.el10_1
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. The best course of action is to apply the available security update as soon as possible.
Conclusion
The 'Dirty Frag' vulnerability in the Linux kernel poses a significant risk of Local Privilege Escalation, allowing attackers to gain unauthorized access to system resources. It is vital to update the kernel package to the latest patched version to ensure system security. Regular monitoring for vulnerabilities using tools like Vulert can help maintain a secure environment.
See every vulnerability recorded for kernel →
FAQ
CVE-2026-43284 is a Local Privilege Escalation vulnerability in the Linux kernel that allows attackers with local access to escalate their privileges.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The CVSS score for CVE-2026-43284 is 7.8, indicating a high severity level.
While there are no specific workarounds, it is crucial to prioritize updating the kernel as soon as possible to mitigate the risk.
The Rocky Enterprise Software Foundation and Red Hat are credited with addressing this vulnerability through the release of security updates.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
