01 Record

CVE-2026-43284

xfrm: esp: avoid in-place decrypt on shared skb frags

HighPUBLISHEDCNA: Linux

CNA base score8.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

View raw JSON

02 Description

xfrm: esp: avoid in-place decrypt on shared skb frags

03 Exploitation and scoring

Exploitation

Public exploit code exists. CISA's assessment records a public proof of concept. That is not a report of exploitation in the wild.

SSVC decision

ExploitationpocPublic proof-of-concept exploit code exists. Not a report of exploitation in the wild.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

93.23% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 99.8% of scored records. A rank, not a probability.

NVD base score

8.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-07-15.

Red Hat severity

Important. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-05-08 07:21Z3 MO AGO

Last updated

2026-09-01 12:04Z3 DAYS AGO

Reserved

2026-05-01

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 8.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-123Write-what-where ConditionBase

Data version

5.2

Document digest

47f7de0d5f02aa20cb862821e1b574c9e28e16f7fc99304f1f739594c4ad9d33

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxcac2661c53f35cbe651bef9b07026a5a05ab8ce0 to < a6cb440f274a22456ef3e86b457344f1678f38f9, cac2661c53f35cbe651bef9b07026a5a05ab8ce0 to < ab8b995323e5237041472d07e5055f5f7dcdf15b, cac2661c53f35cbe651bef9b07026a5a05ab8ce0 to < fe785bb3a8096dffcc4048a85cd0c83337eeecad, cac2661c53f35cbe651bef9b07026a5a05ab8ce0 to < 5d55c7336f8032d434adcc5fab987ccc93a44aec, cac2661c53f35cbe651bef9b07026a5a05ab8ce0 to < 8253aab4659ca16116b522203c2a6b18dccacea7, cac2661c53f35cbe651bef9b07026a5a05ab8ce0 to < 50ed1e7873100f77abad20fd31c51029bc49cd03, cac2661c53f35cbe651bef9b07026a5a05ab8ce0 to < b54edf1e9a3fd3491bdcb82a21f8d21315271e0d, cac2661c53f35cbe651bef9b07026a5a05ab8ce0 to < 71a1d9d985d26716f74d21f18ee8cac821b06e97, cac2661c53f35cbe651bef9b07026a5a05ab8ce0 to < 52646cbd00e765a6db9c3afe9535f26218276034, cac2661c53f35cbe651bef9b07026a5a05ab8ce0 to < f4c50a4034e62ab75f1d5cdd191dd5f9c77fdff4, 4.11—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/a6cb440f274a22456ef3e86b457344f1678f38f9
git.kernel.orghttps://git.kernel.org/stable/c/ab8b995323e5237041472d07e5055f5f7dcdf15b
git.kernel.orghttps://git.kernel.org/stable/c/fe785bb3a8096dffcc4048a85cd0c83337eeecad
git.kernel.orghttps://git.kernel.org/stable/c/5d55c7336f8032d434adcc5fab987ccc93a44aec
git.kernel.orghttps://git.kernel.org/stable/c/8253aab4659ca16116b522203c2a6b18dccacea7
git.kernel.orghttps://git.kernel.org/stable/c/50ed1e7873100f77abad20fd31c51029bc49cd03
git.kernel.orghttps://git.kernel.org/stable/c/b54edf1e9a3fd3491bdcb82a21f8d21315271e0d
git.kernel.orghttps://git.kernel.org/stable/c/71a1d9d985d26716f74d21f18ee8cac821b06e97
git.kernel.orghttps://git.kernel.org/stable/c/52646cbd00e765a6db9c3afe9535f26218276034
git.kernel.orghttps://git.kernel.org/stable/c/f4c50a4034e62ab75f1d5cdd191dd5f9c77fdff4
www.openwall.comhttp://www.openwall.com/lists/oss-security/2026/05/08/7
www.openwall.comhttp://www.openwall.com/lists/oss-security/2026/05/13/6
www.openwall.comhttp://www.openwall.com/lists/oss-security/2026/05/14/2
www.openwall.comhttp://www.openwall.com/lists/oss-security/2026/05/14/4
www.vicarius.iohttps://www.vicarius.io/vsociety/posts/cve-2026-43284-detection-script-dirty-frag-linux-kernel-local-privilege-escalation
www.vicarius.iohttps://www.vicarius.io/vsociety/posts/cve-2026-43284-mitigation-script-dirty-frag-linux-kernel-local-privilege-escalation
github.comhttps://github.com/V4bel/dirtyfragexploit
access.redhat.comhttps://access.redhat.com/security/cve/CVE-2026-43284vdb-entryx_refsource_REDHAT
bugzilla.redhat.comRHBZ#2467771https://bugzilla.redhat.com/show_bug.cgi?id=2467771issue-trackingx_refsource_REDHAT
security.access.redhat.comhttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43284.jsonx_sadp-csaf-vex
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:17795vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:33486vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:16180vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:21695vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:26542vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:16176vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:23233vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:16171vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:34098vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:16160vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:16161vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:16157vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:16155vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:16314vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:16062vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:19569vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:19074vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:16202vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:16328vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:16100vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:16312vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:16206vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:19568vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:19225vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:16195vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:19574vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:16201vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:16204vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:19564vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:16061vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:19572vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:19575vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:19573vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:19577vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:18025vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:16196vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:16203vendor-advisoryx_refsource_REDHAT
access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:16254vendor-advisoryx_refsource_REDHAT
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-082556.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-019113.html

01 Record index

CVE-2026-43284

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2026-43284

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References