New Linux Kernel Vulnerability Fragnesia Allows Root Privilege Escalation

Microsoft has urged organizations to apply the available patches as soon as possible.Fragnesia is in the same class of vulnerabilities as the recently disclosedDirty FragandCopy Fail.Copy Fail has beenexploitedin the wild, and Microsoft noted shortly after Dirty Frag’s disclosure that it too may have been leveraged in malicious attacks.The tech giant reported on May 8 that its Defender product had seen limited in-the-wild activity that could indicate exploitation of either Dirty Frag or Copy Fail.At the time of writing, there do not appear to be any other reports confirming the exploitation of Dirty Frag.Related:OpenSSH Flaw Allowing Full Root Shell Access Lurked for 15 YearsRelated:Easily Exploitable ‘Pack2TheRoot’ Linux Vulnerability Leads to Root AccessRelated:Organizations Warned of Exploited Linux Vulnerabilities

Fragnesia is in the same class of vulnerabilities as the recently disclosedDirty FragandCopy Fail.Copy Fail has beenexploitedin the wild, and Microsoft noted shortly after Dirty Frag’s disclosure that it too may have been leveraged in malicious attacks.The tech giant reported on May 8 that its Defender product had seen limited in-the-wild activity that could indicate exploitation of either Dirty Frag or Copy Fail.At the time of writing, there do not appear to be any other reports confirming the exploitation of Dirty Frag.Related:OpenSSH Flaw Allowing Full Root Shell Access Lurked for 15 YearsRelated:Easily Exploitable ‘Pack2TheRoot’ Linux Vulnerability Leads to Root AccessRelated:Organizations Warned of Exploited Linux Vulnerabilities

Copy Fail has beenexploitedin the wild, and Microsoft noted shortly after Dirty Frag’s disclosure that it too may have been leveraged in malicious attacks.The tech giant reported on May 8 that its Defender product had seen limited in-the-wild activity that could indicate exploitation of either Dirty Frag or Copy Fail.At the time of writing, there do not appear to be any other reports confirming the exploitation of Dirty Frag.Related:OpenSSH Flaw Allowing Full Root Shell Access Lurked for 15 YearsRelated:Easily Exploitable ‘Pack2TheRoot’ Linux Vulnerability Leads to Root AccessRelated:Organizations Warned of Exploited Linux Vulnerabilities

The tech giant reported on May 8 that its Defender product had seen limited in-the-wild activity that could indicate exploitation of either Dirty Frag or Copy Fail.At the time of writing, there do not appear to be any other reports confirming the exploitation of Dirty Frag.Related:OpenSSH Flaw Allowing Full Root Shell Access Lurked for 15 YearsRelated:Easily Exploitable ‘Pack2TheRoot’ Linux Vulnerability Leads to Root AccessRelated:Organizations Warned of Exploited Linux Vulnerabilities

At the time of writing, there do not appear to be any other reports confirming the exploitation of Dirty Frag.Related:OpenSSH Flaw Allowing Full Root Shell Access Lurked for 15 YearsRelated:Easily Exploitable ‘Pack2TheRoot’ Linux Vulnerability Leads to Root AccessRelated:Organizations Warned of Exploited Linux Vulnerabilities

Related:OpenSSH Flaw Allowing Full Root Shell Access Lurked for 15 YearsRelated:Easily Exploitable ‘Pack2TheRoot’ Linux Vulnerability Leads to Root AccessRelated:Organizations Warned of Exploited Linux Vulnerabilities

Related:Easily Exploitable ‘Pack2TheRoot’ Linux Vulnerability Leads to Root AccessRelated:Organizations Warned of Exploited Linux Vulnerabilities

Related:Organizations Warned of Exploited Linux Vulnerabilities

Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

In cyber-physical systems (CPS), just one hour of downtime can outweigh an entire annual security budget. Learn how to master the Return on Security Investment (ROSI) to align security goals with the bottom-line priorities.

Source: SecurityWeek