Another Day, Another Local Privilege Escalation Vulnerability in Linux: Meet Fragnesia
Security researcher William Bowling has warned of yet another universal local privilege escalation (LPE) vulnerability in the Linux kernel, dubbed Fragnesia — the fourth to be publicly disclosed in just two weeks.
"[Fragnesia] abuses a logic bug in the Linux XFRM ESP-in-TCP subsystem to achieve arbitrary byte writes into the kernel page cache of read-only files," Bowling explains of the flaw, "without requiring any race condition. The core bug is [that] the skb [Socket Buffer] 'forgets' that a frag[mented network packet] is shared during coalescing."
Fragnesia is the fourth easily-exploited local privilege escalation vulnerability to have been publicly disclosed in the last two weeks, after Copy Fail, and the follow-up Copy Fail 2: Electric Boogaloo, opened the floodgates. While related, as the name implies, to Dirty Frag, it's a distinct bug in and of itself and requires a different patch — though the same mitigation as used for...
Copyright of this story solely belongs to hackster.io. To see the full text click HERE
