Fragnesia kernel flaw grants root on Linux distributions, Zellic finds
A new Linux vulnerability called Fragnesia has just been revealed, and it's the third big flaw in the kernel in only two weeks.
What's wild is that Zellic spotted it using its V12 software auditing tool.
This bug lets regular users gain full (root) access on all major Linux distributions, thanks to an issue in the XFRM ESP-in-TCP subsystem.
Fragnesia patch available but not shipping
Fragnesia is a high-risk threat, especially for cloud setups and shared servers. It scores 7.8 out of 10 on the severity scale.
Right now, the patch is available but is not currently shipping in any distro as of May 13, but developers are working on one.
If you're worried, there are some command-line workarounds to help protect your system for now (just note they might mess with things like VPNs).
Best advice: keep an eye out for updates from your distro!