Вход на сайт
Просмотр новости

Найдите то, что Вас интересует

Copy Fail, Dirty Frag, and Fragnesia kernel vulnerabilities
Дата публикации: 19-05-2026 05:00:00



The Linux kernel has recently been facing a series of discovered
privilege escalation vulnerabilities, starting with the
Copy Fail vulnerability and followed by subsequent
vulnerabilities in the same spirit
(Dirty Frag,
Fragnesia).
This development is part of a general trend where vulnerabilities are being found - and
disclosed - faster than before. We expect it to continue, at least for
the short-term.
The Gentoo Linux Kernel and Distribution Kernel teams are doing their best
to keep Gentoo kernels secure. This includes both packaging the latest
upstream releases as soon as possible, and backporting additional vulnerability fixes
or mitigations whenever they become available.
As example, while upstream kernel releases are still vulnerable to Fragnesia,
the respective Gentoo kernels feature fixes from day one. At the time of writing, all
supported Gentoo kernels feature the latest Fragnesia v5 patch. Please expect more updates.
We recommend exploring ways to automate upgrading your kernel.
Please note that only
sys-kernel/gentoo-kernel,
sys-kernel/gentoo-kernel-bin
and sys-kernel/gentoo-sources
packages are security-supported. The vanilla kernel packages are
vulnerable at the moment. Other kernel packages may carry fixes, but
they usually are slower to be updated. Additionally, we recommend
running the latest kernel version (~arch or latest stable LTS), as
upstream does not reliably backport security fixes to older versions.


Основное содержимое страницы с новостью.

Fragnesia logo

The Linux kernel has recently been facing a series of discovered privilege escalation vulnerabilities, starting with the Copy Fail vulnerability and followed by subsequent vulnerabilities in the same spirit (Dirty Frag, Fragnesia). This development is part of a general trend where vulnerabilities are being found - and disclosed - faster than before. We expect it to continue, at least for the short-term.

The Gentoo Linux Kernel and Distribution Kernel teams are doing their best to keep Gentoo kernels secure. This includes both packaging the latest upstream releases as soon as possible, and backporting additional vulnerability fixes or mitigations whenever they become available. As example, while upstream kernel releases are still vulnerable to Fragnesia, the respective Gentoo kernels feature fixes from day one. At the time of writing, all supported Gentoo kernels feature the latest Fragnesia v5 patch. Please expect more updates. We recommend exploring ways to automate upgrading your kernel.

Please note that only sys-kernel/gentoo-kernel, sys-kernel/gentoo-kernel-bin and sys-kernel/gentoo-sources packages are security-supported. The vanilla kernel packages are vulnerable at the moment. Other kernel packages may carry fixes, but they usually are slower to be updated. Additionally, we recommend running the latest kernel version (~arch or latest stable LTS), as upstream does not reliably backport security fixes to older versions.

Схожие новости

#Наименование новостиТональностьИнформативностьДата публикации
1Gentoo GNU/Hurd013.1201-04-2026
2Ubuntu Container Escape Vulnerability Gets Public Exploit Before Kernel Patch Arrives010.6622-09-2026
3Gentoo infrastructure sponsors wanted!09.5707-10-2026
4432 отчёта об уязвимостях в ядре Linux. Локальная root-уязвимость Frag Gap013.8422-07-2026
5The Gentoo Big Forum Upgrade09.1902-04-2026
6Linux Kernel Fragnesia Critical Privilege Escalation CVE-2026-46300-1714-05-2026
7In Memory of Hans de Graaff07.1326-02-2026
8Carrot disclosure: Forgejo09.3528-04-2026
9Supercharging our forums with AI08.5301-04-2026
10New Vulnerability Discovered in Linux Kernel017.1717-07-2026

Классификация: . Схожих патентов: 0. Схожих новостей: 10. Тональность: 0. Информативность: 8.22. Источник: gentoo.org.