FlawAtlas
Search the atlas
USN-8390-1 Not scored

linux, linux-azure, linux-azure-4.15, linux-azure-fips, linux-fips, linux-gcp-4.15, linux-gcp-fips, linux-kvm, linux-oracle vulnerability

It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker could use this to escalate privileges, or possibly escape a container.

Exploit probability Not scored
Published June 4, 2026
Required by Not available
Last source change June 30, 2026

02 / AFFECTED SOFTWARE

Affected packages

Ubuntu:Pro:14.04:LTS linux-azure

119 explicit affected versions

Ubuntu:Pro:18.04:LTS linux

150 explicit affected versions

Ubuntu:Pro:18.04:LTS linux-azure-4.15

89 explicit affected versions

Ubuntu:Pro:18.04:LTS linux-gcp-4.15

90 explicit affected versions

Ubuntu:Pro:18.04:LTS linux-kvm

128 explicit affected versions

Ubuntu:Pro:18.04:LTS linux-oracle

115 explicit affected versions

Ubuntu:Pro:FIPS-updates:18.04:LTS linux-azure-fips

82 explicit affected versions

Ubuntu:Pro:FIPS-updates:18.04:LTS linux-fips

94 explicit affected versions

Ubuntu:Pro:FIPS-updates:18.04:LTS linux-gcp-fips

66 explicit affected versions

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities USN-8390-1

It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker could use this to escalate privileges, or possibly escape a container.

View original source

05 / REFERENCES

Further evidence