Storyline

New Linux privilege escalation flaw 'Fragnesia' adds to recent kernel vulnerabilities

Fragnesia (CVE-2026-46300) is a newly disclosed local privilege escalation vulnerability in the Linux kernel affecting the XFRM ESP-in-TCP subsystem.

Published 2026-05-14 02:17 UTCUpdated 2026-05-15 00:50 UTC
Current brief openSource links open
This current storyline is open here with summary, metadata, source links, continuity context, and full evidence. Paid is for compare-over-time, alerts, exports, and workflow.
No card needed for the free brief.
Evidence trail (top sources)
top sources (2 domains)domains are deduped. counts indicate coverage, not truth.
2 top sources shown
limited source diversity in top sources
Overview

Fragnesia (CVE-2026-46300) is a newly disclosed local privilege escalation vulnerability in the Linux kernel affecting the XFRM ESP-in-TCP subsystem.

Score total
0.86
Momentum 24h
2
Posts
2
Origins
2
Source types
1
Duplicate ratio
0%
Why now
  • Fragnesia is the latest in a rapid succession of Linux kernel privilege escalation flaws.
  • A public exploit is already available, increasing risk of active attacks.
  • Linux administrators must respond quickly to protect systems from exploitation.
Why it matters
  • Fragnesia enables local attackers to bypass critical Linux kernel security controls.
  • Multiple recent Linux kernel vulnerabilities increase risk for unpatched systems.
  • Public proof-of-concept exploit raises urgency for patching and mitigation.
Continuity snapshot
  • Trend status: insufficient_history.
  • Continuity stage: chatter.
  • Current status: open.
  • 2 current source-linked posts are attached to this storyline.
All evidence
All evidence
Meet Fragnesia, the third Linux kernel vulnerability in a month
CSO Online · csoonline.com · 2026-05-14 20:29 UTC
Show filters & breakdown
Posts loaded: 0Publishers: 2Origin domains: 2Duplicates: -
Showing 2 / 0
Top publishers (this list)
  • SC Media (1)
  • CSO Online (1)
Top origin domains (this list)
  • scworld.com (1)
  • csoonline.com (1)