Skip to content
AI News HubLIVE
More
Summary only

The third major Linux kernel flaw in two weeks has been found - thanks to AI

Following Copy Fail and Dirty Frag, another critical Linux kernel vulnerability named Fragnesia has emerged, allowing unprivileged users to gain full root control. Discovered by AI security company Zellic using its V12 AI-agentic auditing tool, the bug exploits a logic error in the Linux XFRM ESP-in-TCP subsystem to write arbitrary bytes into the kernel page cache of read-only files without race conditions. A proof-of-concept exploit exists, affecting all major distributions. An upstream patch is available but not yet shipped; temporary mitigations disable IPsec or user namespaces.

SourceZDNet AI
The third major Linux kernel flaw in two weeks has been found - thanks to AI
Report an error

The correction channel is not available yet. You can copy the article reference below for later.

Correction instructions

Summary only

Under the source content permission, this page provides an editorial summary, key points, and a link to the original article.

Key points and analysis

Article intelligence

EngineersIntermediate

Key points

  • Fragnesia is the third major Linux kernel vulnerability in two weeks, granting root access to unauthorized users.
  • The bug was found by AI-powered tool V12, exploiting a logic bug in the XFRM subsystem without requiring race conditions.
  • A proof-of-concept exploit exists, and all major Linux distributions are affected.
  • An upstream patch is available but not yet shipped; mitigations break IPsec or user namespaces.

Highlights and analysis are generated automatically and may contain errors. Check the original source.

More recent stories on this topic · Agents