The "Dirty Frag" vulnerability (CVE-2026-43284, CVSS 8.8 High) is a universal Local Privilege Escalation (LPE) flaw in the Linux kernel's ESP XFRM subsystem. Affected versions include Linux kernel 4.11 through 5.10.254, 5.12 through 5.15.204, 5.16 through 6.1.170, 6.2 through 6.6.137, and 6.7 through 6.12.86. The fix requires upgrading to patched kernel versions such as 5.10.255, 5.15.205, 6.1.171, 6.6.138, 6.12.87, or 6.18.28, followed by a system reboot.
Red Hat Product Errata RHSA-2026:16206 - Security Advisory Issued: 2026-05-12 Updated: 2026-05-12 RHSA-2026:16206 - Security Advisory Overview Updated Packages Synopsis Important: kernel security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: "Dirty Frag" is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat CodeReady Linux Builder for x86_64 9 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le Red Hat CodeReady Linux Builder for ARM 64 9 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x Fixes BZ - 2467771 - CVE-2026-43284 kernel: "Dirty Frag" ESP XFRM variant is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel CVEs CVE-2026-43284 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM kernel-5.14.0-611.55.1.el9_7.src.rpm SHA-256: 81378e3149456f29e6086a31bb35b1141da829f8f33de2d283cc0c677dd1c556 x86_64 kernel-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: 56e0d14d01fe616cb9d9b7832177fd554d5e96119760092095fc95e4d94f2af9 kernel-abi-stablelists-5.14.0-611.55.1.el9_7.noarch.rpm SHA-256: e087bc55c7ac5feb6495cb6de3394a7071648a0216c14b82a99230e299f2c50c kernel-core-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: 7f6f2e33ed681891cdefe3420b168451a05896cf5e91c9c8675022f41971fa2c kernel-debug-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: 5da987e10e1aa84016f4cacb09d31c6ada7ee60de8394eba8d86331340dca2c9 kernel-debug-core-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: cae7905ce12acdb5a501739a53526a7e8cc4f4a1c52a0a9247c648bcd666f2f4 kernel-debug-debuginfo-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: 0c08b8a29e24eaa45af1b1044737f6d98f1bf641d1b64901dc2544ccf392ba73 kernel-debug-debuginfo-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: 0c08b8a29e24eaa45af1b1044737f6d98f1bf641d1b64901dc2544ccf392ba73 kernel-debug-debuginfo-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: 0c08b8a29e24eaa45af1b1044737f6d98f1bf641d1b64901dc2544ccf392ba73 kernel-debug-debuginfo-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: 0c08b8a29e24eaa45af1b1044737f6d98f1bf641d1b64901dc2544ccf392ba73 kernel-debug-devel-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: 816a17a1d8bbbf6a07e6bf7194ef04c27551992a1f1e7e7c61c3c117300bbecf kernel-debug-devel-matched-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: 977defca3bd5303e565603e00eaa6e258f3228ff8b4cd3280c961b6540d7a9d8 kernel-debug-modules-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: 611a5658eacebb31b29e9cd5708a310564c889bc6e5ab70f521d3340a99b3b62 kernel-debug-modules-core-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: 586cd70f0938fcf58cb15e7ff43884ea3f53ab244160f9bee0635d2747f00777 kernel-debug-modules-extra-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: e196f892c4e424445f2e9a947406664a00586676e0b1d3ea1930e2c437cbad0d kernel-debug-uki-virt-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: ec9053e3819c9e1ea4f82d0c9ed5e4cbf451f7db13561b5064e4b2a88a20cebd kernel-debuginfo-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: 26d5bfa243c5ae2a7fd626e507409fe11e03cb1e2ce95af5fb640531fc044766 kernel-debuginfo-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: 26d5bfa243c5ae2a7fd626e507409fe11e03cb1e2ce95af5fb640531fc044766 kernel-debuginfo-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: 26d5bfa243c5ae2a7fd626e507409fe11e03cb1e2ce95af5fb640531fc044766 kernel-debuginfo-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: 26d5bfa243c5ae2a7fd626e507409fe11e03cb1e2ce95af5fb640531fc044766 kernel-debuginfo-common-x86_64-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: cfeb520a104d60f8d3b50f7b5abb9ce2baf3b7acf5372fc70a1c5c545b1f1789 kernel-debuginfo-common-x86_64-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: cfeb520a104d60f8d3b50f7b5abb9ce2baf3b7acf5372fc70a1c5c545b1f1789 kernel-debuginfo-common-x86_64-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: cfeb520a104d60f8d3b50f7b5abb9ce2baf3b7acf5372fc70a1c5c545b1f1789 kernel-debuginfo-common-x86_64-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: cfeb520a104d60f8d3b50f7b5abb9ce2baf3b7acf5372fc70a1c5c545b1f1789 kernel-devel-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: 47b65150a3b3fdf6cc71546fea28dd35ec735d95c7d4176e204f180014ac8889 kernel-devel-matched-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: 5539a06d5e5f7d9582e89fd0c12fffedf4dbc328a45161a0dc117919594ffaaf kernel-doc-5.14.0-611.55.1.el9_7.noarch.rpm SHA-256: 1bfb110761df6c9d24f1ee3a1830f63bde6fd9c4e6b9d980e18a36ed6da86f88 kernel-headers-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: 5791683d2358facf7330677530af09cd0b310c71ed92b151b30a9c11eeafab2a kernel-modules-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: fd000b4a2271d8e07d508ec00adf1ba35c17f27f04295e760457233ff76dd746 kernel-modules-core-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: 088da323acc66a6ad4848af0aa3be03a1e22303f1845484e8b0455b34cc46957 kernel-modules-extra-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: ffcafcf65e7377d6b7b856ecf9f50d983474278ec35ebc752e48574681c5f3ad kernel-rt-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: 1e43bcad58a1f8ec3779c2837df4ec0fa919d8593627904de5e80d96cbc2f360 kernel-rt-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: 1e43bcad58a1f8ec3779c2837df4ec0fa919d8593627904de5e80d96cbc2f360 kernel-rt-core-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: 3bf11ece339f938f0283dd85454f2ddf936c7e6634834468ec3feb18c5e62595 kernel-rt-core-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: 3bf11ece339f938f0283dd85454f2ddf936c7e6634834468ec3feb18c5e62595 kernel-rt-debug-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: 031e8d1f7c2a47baa9fd6d7a6ca5e1518ea13afe7036ebac08033503bbfb23ed kernel-rt-debug-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: 031e8d1f7c2a47baa9fd6d7a6ca5e1518ea13afe7036ebac08033503bbfb23ed kernel-rt-debug-core-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: 39155227900acf5319e3c2e04c5628d0af555993aab71d33641871a5145a42a9 kernel-rt-debug-core-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: 39155227900acf5319e3c2e04c5628d0af555993aab71d33641871a5145a42a9 kernel-rt-debug-debuginfo-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: 0e50f9f3d3c62bb372189af92b84cc33ee5dd10723c90e9087441769a7d78d38 kernel-rt-debug-debuginfo-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: 0e50f9f3d3c62bb372189af92b84cc33ee5dd10723c90e9087441769a7d78d38 kernel-rt-debug-debuginfo-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: 0e50f9f3d3c62bb372189af92b84cc33ee5dd10723c90e9087441769a7d78d38 kernel-rt-debug-debuginfo-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: 0e50f9f3d3c62bb372189af92b84cc33ee5dd10723c90e9087441769a7d78d38 kernel-rt-debug-devel-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: c05b4eca8ded5e0c56004bb4197403840aefcedba5710dbfec49d7e4cb5c7841 kernel-rt-debug-devel-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: c05b4eca8ded5e0c56004bb4197403840aefcedba5710dbfec49d7e4cb5c7841 kernel-rt-debug-modules-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: 620a8776a87431140237086e841364d7bacdec86ce8ba630de300fcbf810a630 kernel-rt-debug-modules-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: 620a8776a87431140237086e841364d7bacdec86ce8ba630de300fcbf810a630 kernel-rt-debug-modules-core-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: e70246b5057b95c0433433c79b8f6b519a24eb442cf4a33c612cdd6d0f4040a0 kernel-rt-debug-modules-core-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: e70246b5057b95c0433433c79b8f6b519a24eb442cf4a33c612cdd6d0f4040a0 kernel-rt-debug-modules-extra-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: c7752f08055b984098c114bff179c13fad706030c4221761217950d51263bd49 kernel-rt-debug-modules-extra-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: c7752f08055b984098c114bff179c13fad706030c4221761217950d51263bd49 kernel-rt-debuginfo-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: ce48829c2779d4471a237a35f0bab018f2f7ab9ed45133bec583b7a258302e4c kernel-rt-debuginfo-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: ce48829c2779d4471a237a35f0bab018f2f7ab9ed45133bec583b7a258302e4c kernel-rt-debuginfo-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: ce48829c2779d4471a237a35f0bab018f2f7ab9ed45133bec583b7a258302e4c kernel-rt-debuginfo-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: ce48829c2779d4471a237a35f0bab018f2f7ab9ed45133bec583b7a258302e4c kernel-rt-devel-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: 8c52f63cfb0bdef0fec3ffd6a6c82be361e6127d986fa95c43ccf763ffa009a0 kernel-rt-devel-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: 8c52f63cfb0bdef0fec3ffd6a6c82be361e6127d986fa95c43ccf763ffa009a0 kernel-rt-modules-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: d83f49d683fc967c3d9cba365d34741dec43896804ea40b85fbf55fbea67b5f6 kernel-rt-modules-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: d83f49d683fc967c3d9cba365d34741dec43896804ea40b85fbf55fbea67b5f6 kernel-rt-modules-core-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: 8691e167ee669bef467c14941525cd5b7ab4973cb5fd12347092f3b24a2a4c86 kernel-rt-modules-core-5.14.0-611.55.1.el9_7.x86_64.rpm SHA-256: 8691e167ee669bef467c14941525cd5b7ab4973cb5fd12347092f3b24a2a4c86 kernel-rt