{"schema":"vulnpedia.poc/1","cve":"CVE-2026-43284","generated":"2026-10-26T06:59:15.268Z","kev":null,"epss":{"score":0.94194,"percentile":0.99847},"cvss":{"version":"3.1","score":8.8,"severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"},"has_public_poc":true,"poc_sources":[{"kind":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2026_43284_dirty_frag.rb","executable":true,"sourceId":"exploit/linux/local/cve_2026_43284_dirty_frag","description":"xfrm-ESP Page-Cache Write via CVE-2026-43284","verification":"catalogued","source":"metasploit","modified":"2026-06-02 10:32:30 +0000","origins":[{"source":"metasploit","sourceId":"exploit/linux/local/cve_2026_43284_dirty_frag","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2026_43284_dirty_frag.rb"},{"source":"metasploit","sourceId":"exploit/linux/local/cve_2026_43284_dirty_frag","modified":"2026-06-02 10:32:30 +0000","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2026_43284_dirty_frag.rb"}]},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/350c2e9f4c2c","executable":false,"sourceId":"350c2e9f4c2c","verification":"catalogued","source":"vulncheck-kev","modified":"2026-05-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"350c2e9f4c2c","modified":"2026-05-08T00:00:00Z","url":"https://vulncheck.com/xdb/350c2e9f4c2c"}],"repositoryUrl":"https://github.com/Percivalll/Dirty-Frag-Kubernetes-PoC"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/305f6405dcb4","executable":false,"sourceId":"305f6405dcb4","verification":"catalogued","source":"vulncheck-kev","modified":"2026-05-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"305f6405dcb4","modified":"2026-05-08T00:00:00Z","url":"https://vulncheck.com/xdb/305f6405dcb4"}],"repositoryUrl":"https://github.com/KaraZajac/DIRTYFAIL"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/6511769aeed9","executable":false,"sourceId":"6511769aeed9","verification":"catalogued","source":"vulncheck-kev","modified":"2026-05-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"6511769aeed9","modified":"2026-05-08T00:00:00Z","url":"https://vulncheck.com/xdb/6511769aeed9"}],"repositoryUrl":"https://github.com/Aiyakami/rust_dirtyfrag"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/dc998cdd69e4","executable":false,"sourceId":"dc998cdd69e4","verification":"catalogued","source":"vulncheck-kev","modified":"2026-05-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"dc998cdd69e4","modified":"2026-05-08T00:00:00Z","url":"https://vulncheck.com/xdb/dc998cdd69e4"}],"repositoryUrl":"https://github.com/ChernStepanov/DirtyFrag-for-dummies"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/d79af4c54b31","executable":false,"sourceId":"d79af4c54b31","verification":"catalogued","source":"vulncheck-kev","modified":"2026-05-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"d79af4c54b31","modified":"2026-05-08T00:00:00Z","url":"https://vulncheck.com/xdb/d79af4c54b31"}],"repositoryUrl":"https://github.com/xd20111/CVE-2026-43284"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/befd44a4c0b9","executable":false,"sourceId":"befd44a4c0b9","verification":"catalogued","source":"vulncheck-kev","modified":"2026-05-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"befd44a4c0b9","modified":"2026-05-08T00:00:00Z","url":"https://vulncheck.com/xdb/befd44a4c0b9"}],"repositoryUrl":"https://github.com/whosfault/CVE-2026-43284"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/e476a6022a86","executable":false,"sourceId":"e476a6022a86","verification":"catalogued","source":"vulncheck-kev","modified":"2026-05-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"e476a6022a86","modified":"2026-05-08T00:00:00Z","url":"https://vulncheck.com/xdb/e476a6022a86"}],"repositoryUrl":"https://github.com/Koshmare-Blossom/DirtyFrag-go"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/fd893c206d6c","executable":false,"sourceId":"fd893c206d6c","verification":"catalogued","source":"vulncheck-kev","modified":"2026-05-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"fd893c206d6c","modified":"2026-05-08T00:00:00Z","url":"https://vulncheck.com/xdb/fd893c206d6c"}],"repositoryUrl":"https://github.com/jayhutajulu1/CVE-2026-43284-DirtyFrag-PoC"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/d059a5d6b621","executable":false,"sourceId":"d059a5d6b621","verification":"catalogued","source":"vulncheck-kev","modified":"2026-05-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"d059a5d6b621","modified":"2026-05-08T00:00:00Z","url":"https://vulncheck.com/xdb/d059a5d6b621"}],"repositoryUrl":"https://github.com/DylanClaudio/Reporte-de-Escalada-de-Privilegios-Local-Dirty-Frag"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/b390138e6448","executable":false,"sourceId":"b390138e6448","verification":"catalogued","source":"vulncheck-kev","modified":"2026-05-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"b390138e6448","modified":"2026-05-08T00:00:00Z","url":"https://vulncheck.com/xdb/b390138e6448"}],"repositoryUrl":"https://github.com/guiimoraes/CVE-2026-31431"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/46078b4a5c58","executable":false,"sourceId":"46078b4a5c58","verification":"catalogued","source":"vulncheck-kev","modified":"2026-05-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"46078b4a5c58","modified":"2026-05-08T00:00:00Z","url":"https://vulncheck.com/xdb/46078b4a5c58"}],"repositoryUrl":"https://github.com/LucasPDiniz/CVE-2026-43284"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/e97b546d7c2a","executable":false,"sourceId":"e97b546d7c2a","verification":"catalogued","source":"vulncheck-kev","modified":"2026-05-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"e97b546d7c2a","modified":"2026-05-08T00:00:00Z","url":"https://vulncheck.com/xdb/e97b546d7c2a"}],"repositoryUrl":"https://github.com/t1ckprivate/CVE-2026-43284-Dirty-Frag"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/6da6c09258c5","executable":false,"sourceId":"6da6c09258c5","verification":"catalogued","source":"vulncheck-kev","modified":"2026-05-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"6da6c09258c5","modified":"2026-05-08T00:00:00Z","url":"https://vulncheck.com/xdb/6da6c09258c5"}],"repositoryUrl":"https://github.com/linnemanlabs/dirtyfrag-arm64"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/73621adaa387","executable":false,"sourceId":"73621adaa387","verification":"catalogued","source":"vulncheck-kev","modified":"2026-05-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"73621adaa387","modified":"2026-05-08T00:00:00Z","url":"https://vulncheck.com/xdb/73621adaa387"}],"repositoryUrl":"https://github.com/LSPosed/LSPromise"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/a2836b92ed2a","executable":false,"sourceId":"a2836b92ed2a","verification":"catalogued","source":"vulncheck-kev","modified":"2026-05-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"a2836b92ed2a","modified":"2026-05-08T00:00:00Z","url":"https://vulncheck.com/xdb/a2836b92ed2a"}],"repositoryUrl":"https://github.com/TeamN4C/SG-2026-0024"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/fec48ec636bb","executable":false,"sourceId":"fec48ec636bb","verification":"catalogued","source":"vulncheck-kev","modified":"2026-05-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"fec48ec636bb","modified":"2026-05-08T00:00:00Z","url":"https://vulncheck.com/xdb/fec48ec636bb"}],"repositoryUrl":"https://github.com/a2333c/DFRoot"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/2ae975dafc34","executable":false,"sourceId":"2ae975dafc34","verification":"catalogued","source":"vulncheck-kev","modified":"2026-05-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"2ae975dafc34","modified":"2026-05-08T00:00:00Z","url":"https://vulncheck.com/xdb/2ae975dafc34"}],"repositoryUrl":"https://github.com/coey0814/DirtyFrag-Galaxy"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/179d77cf33fc","executable":false,"sourceId":"179d77cf33fc","verification":"catalogued","source":"vulncheck-kev","modified":"2026-05-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"179d77cf33fc","modified":"2026-05-08T00:00:00Z","url":"https://vulncheck.com/xdb/179d77cf33fc"}],"repositoryUrl":"https://github.com/ankitrawatgit/DirtyFrag-Android-Root-Jailbreak"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/9ec20682ac64","executable":false,"sourceId":"9ec20682ac64","verification":"catalogued","source":"vulncheck-kev","modified":"2026-05-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"9ec20682ac64","modified":"2026-05-08T00:00:00Z","url":"https://vulncheck.com/xdb/9ec20682ac64"}],"repositoryUrl":"https://github.com/6abc/Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/25d53babf408","executable":false,"sourceId":"25d53babf408","verification":"catalogued","source":"vulncheck-kev","modified":"2026-05-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"25d53babf408","modified":"2026-05-08T00:00:00Z","url":"https://vulncheck.com/xdb/25d53babf408"}],"repositoryUrl":"https://github.com/SudoXDdX/DirtyFrag"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/42b9aa344551","executable":false,"sourceId":"42b9aa344551","verification":"catalogued","source":"vulncheck-kev","modified":"2026-05-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"42b9aa344551","modified":"2026-05-08T00:00:00Z","url":"https://vulncheck.com/xdb/42b9aa344551"}],"repositoryUrl":"https://github.com/RemiPelloux/GalaxyCrash"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/06bb069ee10a","executable":false,"sourceId":"06bb069ee10a","verification":"catalogued","source":"vulncheck-kev","modified":"2026-05-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"06bb069ee10a","modified":"2026-05-08T00:00:00Z","url":"https://vulncheck.com/xdb/06bb069ee10a"}],"repositoryUrl":"https://github.com/V4bel/dirtyfrag"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/f3d4bdb3263f","executable":false,"sourceId":"f3d4bdb3263f","verification":"catalogued","source":"vulncheck-kev","modified":"2026-05-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"f3d4bdb3263f","modified":"2026-05-08T00:00:00Z","url":"https://vulncheck.com/xdb/f3d4bdb3263f"}],"repositoryUrl":"https://github.com/ziachi/DirtyFrag"},{"kind":"exploitdb","id":"52591","url":"https://www.exploit-db.com/exploits/52591","code":"https://www.exploit-db.com/download/52591","executable":true},{"kind":"exploitdb","id":"52585","url":"https://www.exploit-db.com/exploits/52585","code":"https://www.exploit-db.com/download/52585","executable":true}],"poc_candidates":[{"url":"https://github.com/Percivalll/Dirty-Frag-Kubernetes-PoC","source":"poc-in-github","sourceId":"CVE-2026-43284","description":"A proof-of-concept demonstrating how a default, unprivileged Kubernetes Pod can achieve node-level code execution on Amazon EKS by exploiting the Dirty Frag (CVE-2026-43284) Linux kernel page-cache corruption vulnerability through shared container image layers.","modified":"2026-10-17T02:31:05Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/Percivalll/Dirty-Frag-Kubernetes-PoC"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-10-17T02:31:05Z","url":"https://github.com/Percivalll/Dirty-Frag-Kubernetes-PoC"}],"tags":[]},{"url":"https://github.com/scriptzteam/Paranoid-Dirty-Frag-CVE-2026-43284","source":"poc-in-github","sourceId":"CVE-2026-43284","description":"Paranoid disable Linux IPsec ESP support (esp4/esp6) and RxRPC support.","modified":"2026-05-08T16:37:18Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/scriptzteam/Paranoid-Dirty-Frag-CVE-2026-43284"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-05-08T16:37:18Z","url":"https://github.com/scriptzteam/Paranoid-Dirty-Frag-CVE-2026-43284"}],"tags":[]},{"url":"https://github.com/mym0us3r/DIRTY-FRAG-Detection-with-Wazuh-4.14.4","source":"poc-in-github","sourceId":"CVE-2026-43284","description":"Wazuh 4.14.4 detection rules for CVE-2026-43284 / CVE-2026-43500 (Dirty Frag) - Linux Local Privilege Escalation via page cache write","modified":"2026-05-17T03:32:57Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/mym0us3r/DIRTY-FRAG-Detection-with-Wazuh-4.14.4"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-05-17T03:32:57Z","url":"https://github.com/mym0us3r/DIRTY-FRAG-Detection-with-Wazuh-4.14.4"}],"tags":[]},{"url":"https://github.com/0xBlackash/CVE-2026-43284","source":"poc-in-github","sourceId":"CVE-2026-43284","description":"CVE-2026-43284","modified":"2026-10-25T09:44:37Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/0xBlackash/CVE-2026-43284"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-10-25T09:44:37Z","url":"https://github.com/0xBlackash/CVE-2026-43284"}],"tags":[]},{"url":"https://github.com/suominen/CVE-2026-43284","source":"poc-in-github","sourceId":"CVE-2026-43284","description":"Tracking Dirty Frag (CVE-2026-43284, CVE-2026-43500), the xfrm-ESP and RxRPC page-cache write LPE chain","modified":"2026-08-01T22:08:08Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/suominen/CVE-2026-43284"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-08-01T22:08:08Z","url":"https://github.com/suominen/CVE-2026-43284"}],"tags":[]},{"url":"https://github.com/AK777177/Dirty-Frag-Analysis","source":"poc-in-github","sourceId":"CVE-2026-43284","description":"Dirty Frag (CVE-2026-43284/43500) - Linux Kernel LPE Deep Technical Analysis by Bomb","modified":"2026-05-19T11:39:39Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/AK777177/Dirty-Frag-Analysis"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-05-19T11:39:39Z","url":"https://github.com/AK777177/Dirty-Frag-Analysis"}],"tags":[]},{"url":"https://github.com/haydenjames/dirty-frag-check","source":"poc-in-github","sourceId":"CVE-2026-43284","description":"Read-only checker for CVE-2026-43284 / CVE-2026-43500 (Dirty Frag) Linux kernel local-root vulns","modified":"2026-10-20T16:54:01Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/haydenjames/dirty-frag-check"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-10-20T16:54:01Z","url":"https://github.com/haydenjames/dirty-frag-check"}],"tags":[]},{"url":"https://github.com/metalx1993/dirtyfrag-patches","source":"poc-in-github","sourceId":"CVE-2026-43284","description":"Kernel patches for Dirty Frag vulnerability (CVE-2026-43284, CVE-2026-43500)","modified":"2026-05-09T19:54:32Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/metalx1993/dirtyfrag-patches"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-05-09T19:54:32Z","url":"https://github.com/metalx1993/dirtyfrag-patches"}],"tags":[]},{"url":"https://github.com/ryan2929/CVE-2026-43284-","source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-05-10T03:51:03Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/ryan2929/CVE-2026-43284-"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-05-10T03:51:03Z","url":"https://github.com/ryan2929/CVE-2026-43284-"}],"tags":[]},{"url":"https://github.com/linnemanlabs/dirtyfrag-arm64","source":"poc-in-github","sourceId":"CVE-2026-43284","description":"arm64/aarch64 port of V4bel/dirtyfrag (CVE-2026-43284). ESP-only - rxrpc path kernel-oopses on arm64 due to flush_dcache_page","modified":"2026-10-23T18:00:17Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/linnemanlabs/dirtyfrag-arm64"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-10-23T18:00:17Z","url":"https://github.com/linnemanlabs/dirtyfrag-arm64"}],"tags":[]},{"url":"https://github.com/gagaltotal/CVE-2026-43284-CVE-2026-43500-scan","source":"poc-in-github","sourceId":"CVE-2026-43284","description":"Dirtyfrag CVE-2026-43284 & CVE-2026-43500 Scanner","modified":"2026-10-25T12:41:12Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/gagaltotal/CVE-2026-43284-CVE-2026-43500-scan"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-10-25T12:41:12Z","url":"https://github.com/gagaltotal/CVE-2026-43284-CVE-2026-43500-scan"}],"tags":[]},{"url":"https://github.com/Aiyakami/rust_dirtyfrag","source":"poc-in-github","sourceId":"CVE-2026-43284","description":"CVE-2026-43284的rust版本实现","modified":"2026-05-21T12:00:55Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/Aiyakami/rust_dirtyfrag"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-05-21T12:00:55Z","url":"https://github.com/Aiyakami/rust_dirtyfrag"}],"tags":[]},{"url":"https://github.com/XRSecCD/202605_dirty_frag","source":"poc-in-github","sourceId":"CVE-2026-43284","description":"CVE-2026-43284 & CVE-2026-43500 discovered by Hyunwoo Kim","modified":"2026-05-11T16:22:24Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/XRSecCD/202605_dirty_frag"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-05-11T16:22:24Z","url":"https://github.com/XRSecCD/202605_dirty_frag"}],"tags":[]},{"url":"https://github.com/liamromanis101/DirtyFrag-Detector","source":"poc-in-github","sourceId":"CVE-2026-43284","description":"CVE-2026-43284/CVE-2026-43500 'DirtyFrag' Benign patch & mitigation detection script","modified":"2026-10-14T22:59:20Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/liamromanis101/DirtyFrag-Detector"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-10-14T22:59:20Z","url":"https://github.com/liamromanis101/DirtyFrag-Detector"}],"tags":[]},{"url":"https://github.com/FrosterDL/CVE-2026-43284","source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-05-13T16:02:18Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/FrosterDL/CVE-2026-43284"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-05-13T16:02:18Z","url":"https://github.com/FrosterDL/CVE-2026-43284"}],"tags":[]},{"url":"https://github.com/ChernStepanov/DirtyFrag-for-dummies","source":"poc-in-github","sourceId":"CVE-2026-43284","description":"A tiny explanation + PoC for CVE-2026-43284","modified":"2026-05-13T18:42:57Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/ChernStepanov/DirtyFrag-for-dummies"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-05-13T18:42:57Z","url":"https://github.com/ChernStepanov/DirtyFrag-for-dummies"}],"tags":[]},{"url":"https://github.com/xd20111/CVE-2026-43284","source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-05-15T06:51:39Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/xd20111/CVE-2026-43284"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-05-15T06:51:39Z","url":"https://github.com/xd20111/CVE-2026-43284"}],"tags":[]},{"url":"https://github.com/grabesec/XCP_ng_CVE-2026-43284_tester","source":"poc-in-github","sourceId":"CVE-2026-43284","description":"Tester for CVE-2026-43284","modified":"2026-05-15T18:27:46Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/grabesec/XCP_ng_CVE-2026-43284_tester"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-05-15T18:27:46Z","url":"https://github.com/grabesec/XCP_ng_CVE-2026-43284_tester"}],"tags":[]},{"url":"https://github.com/cyber-niz/Dirty-Frag","source":"poc-in-github","sourceId":"CVE-2026-43284","description":"CVE-2026-43284 - Dirty Frag","modified":"2026-05-16T15:58:10Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/cyber-niz/Dirty-Frag"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-05-16T15:58:10Z","url":"https://github.com/cyber-niz/Dirty-Frag"}],"tags":[]},{"url":"https://github.com/Quaerendir/dirtyfrag-audit","source":"poc-in-github","sourceId":"CVE-2026-43284","description":"Audit script for CVE-2026-43284 + CVE-2026-43500 \"Dirty Frag\"","modified":"2026-10-01T02:17:01Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/Quaerendir/dirtyfrag-audit"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-10-01T02:17:01Z","url":"https://github.com/Quaerendir/dirtyfrag-audit"}],"tags":[]},{"url":"https://github.com/LucasPDiniz/CVE-2026-43284","source":"poc-in-github","sourceId":"CVE-2026-43284","description":"Dirty Frag - kernel Linux critical Vulnerability","modified":"2026-05-19T13:56:00Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/LucasPDiniz/CVE-2026-43284"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-05-19T13:56:00Z","url":"https://github.com/LucasPDiniz/CVE-2026-43284"}],"tags":[]},{"url":"https://github.com/kuniyal08/Dirty-Frag-CVE-2026-43284","source":"poc-in-github","sourceId":"CVE-2026-43284","description":"A report on Dirty Frag, which is a Linux Local Privilege Escalation (LPE) vulnerability chain that allows an unprivileged user to gain root access","modified":"2026-09-12T23:16:53Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/kuniyal08/Dirty-Frag-CVE-2026-43284"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-09-12T23:16:53Z","url":"https://github.com/kuniyal08/Dirty-Frag-CVE-2026-43284"}],"tags":[]},{"url":"https://github.com/Koshmare-Blossom/DirtyFrag-go","source":"poc-in-github","sourceId":"CVE-2026-43284","description":"A Go implementation of dirtyfrag (CVE-2026-43284 / CVE-2026-43500)","modified":"2026-10-14T07:57:50Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/Koshmare-Blossom/DirtyFrag-go"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-10-14T07:57:50Z","url":"https://github.com/Koshmare-Blossom/DirtyFrag-go"}],"tags":[]},{"url":"https://github.com/DylanClaudio/Reporte-de-Escalada-de-Privilegios-Local-Dirty-Frag","source":"poc-in-github","sourceId":"CVE-2026-43284","description":"Se realizó una evaluación de vulnerabilidades sobre una máquina virtual con Kali Linux utilizando un script detector para la vulnerabilidad Dirty Frag, asociada a las CVE-2026-43284 y  CVE-2026-43500.  Posteriormente se ejecutó un Proof of Concept (PoC) público escrito en lenguaje C para validar la posibilidad de realizar una escalada local","modified":"2026-07-27T18:15:44Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/DylanClaudio/Reporte-de-Escalada-de-Privilegios-Local-Dirty-Frag"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-07-27T18:15:44Z","url":"https://github.com/DylanClaudio/Reporte-de-Escalada-de-Privilegios-Local-Dirty-Frag"}],"tags":[]},{"url":"https://github.com/AtlasVector/Dirty-Frag-CVE-2026-43284","source":"poc-in-github","sourceId":"CVE-2026-43284","description":"Lab detection exercise for DirtyFrag (CVE-2026-43284) - Linux kernel privilege escalation via xfrm-ESP page cache corruption. Full write-up covering exploit execution, detection gaps, and corrected EQL rules using Elastic Stack","modified":"2026-05-24T13:58:54Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/AtlasVector/Dirty-Frag-CVE-2026-43284"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-05-24T13:58:54Z","url":"https://github.com/AtlasVector/Dirty-Frag-CVE-2026-43284"}],"tags":[]},{"url":"https://github.com/jayhutajulu1/CVE-2026-43284-DirtyFrag-PoC","source":"poc-in-github","sourceId":"CVE-2026-43284","description":"Proof-of-concept for CVE-2026-43284 — 4-byte XFRM/ESP page-cache write primitive to patch a setuid binary (x86_64, user namespaces). Includes kernel preflight + SUID scan.","modified":"2026-08-20T00:57:44Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/jayhutajulu1/CVE-2026-43284-DirtyFrag-PoC"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-08-20T00:57:44Z","url":"https://github.com/jayhutajulu1/CVE-2026-43284-DirtyFrag-PoC"}],"tags":[]},{"url":"https://github.com/nonameuserosint-hue/DirtyFrag-go","source":"poc-in-github","sourceId":"CVE-2026-43284","description":"A Go implementation of dirtyfrag (CVE-2026-43284 / CVE-2026-43500)","modified":"2026-08-29T11:40:17Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/nonameuserosint-hue/DirtyFrag-go"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-08-29T11:40:17Z","url":"https://github.com/nonameuserosint-hue/DirtyFrag-go"}],"tags":[]},{"url":"https://github.com/1neptune/DirtyFrag","source":"poc-in-github","sourceId":"CVE-2026-43284","description":"Add go CVE-2026-43284 / CVE-2026-43500  (dirtyfrag) local privilege escalation exploit","modified":"2026-07-02T03:50:48Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/1neptune/DirtyFrag"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-07-02T03:50:48Z","url":"https://github.com/1neptune/DirtyFrag"}],"tags":[]},{"url":"https://github.com/t1ckprivate/CVE-2026-43284-Dirty-Frag","source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-06-05T09:52:27Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/t1ckprivate/CVE-2026-43284-Dirty-Frag"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-06-05T09:52:27Z","url":"https://github.com/t1ckprivate/CVE-2026-43284-Dirty-Frag"}],"tags":[]},{"url":"https://github.com/g0thamRabb1t/CVE-2026-43284-dirtyfrag-detection","source":"poc-in-github","sourceId":"CVE-2026-43284","description":"This repository contains a lab validation report and detection artefacts for DirtyFrag CVE-2026-43284, a Linux local privilege escalation issue related to the XFRM/ESP page-cache write path. The focus is on auditd telemetry, event correlation, and SOC-oriented detection logic.","modified":"2026-07-09T21:01:03Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/g0thamRabb1t/CVE-2026-43284-dirtyfrag-detection"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-07-09T21:01:03Z","url":"https://github.com/g0thamRabb1t/CVE-2026-43284-dirtyfrag-detection"}],"tags":[]},{"url":"https://github.com/lukeslp/redtail-ioc","source":"poc-in-github","sourceId":"CVE-2026-43284","description":"IOCs and a read-only triage checklist from a real Linux root compromise: RedTail miner, XorDDoS persistence, MoneroOcean miner, DirtyFrag LPE (CVE-2026-43284/43500). CC0.","modified":"2026-07-13T18:50:26Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/lukeslp/redtail-ioc"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-07-13T18:50:26Z","url":"https://github.com/lukeslp/redtail-ioc"}],"tags":[]},{"url":"https://github.com/armircetaj/tetragon-dirtyfrag","source":"poc-in-github","sourceId":"CVE-2026-43284","description":"Blocking the DirtyFrag Linux LPE chain (CVE-2026-43284 / CVE-2026-43500) at runtime with a Cilium Tetragon TracingPolicy","modified":"2026-07-13T06:40:37Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/armircetaj/tetragon-dirtyfrag"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-07-13T06:40:37Z","url":"https://github.com/armircetaj/tetragon-dirtyfrag"}],"tags":[]},{"url":"https://github.com/nabhan-mohy/Dirty-Frag-Research-CVE-2026-43284-","source":"poc-in-github","sourceId":"CVE-2026-43284","description":"Comprehensive technical research on CVE-2026-43284 (Dirty Frag), including Linux kernel internals, root cause analysis, patch analysis, detection engineering, threat hunting, incident response, and Kubernetes security implications.","modified":"2026-07-31T13:31:00Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/nabhan-mohy/Dirty-Frag-Research-CVE-2026-43284-"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-07-31T13:31:00Z","url":"https://github.com/nabhan-mohy/Dirty-Frag-Research-CVE-2026-43284-"}],"tags":[]},{"url":"https://github.com/RevyHub/CVE-2026-43284---DirtyFrag-Analysis-THM-","source":"poc-in-github","sourceId":"CVE-2026-43284","description":"TryHackMe Dirty Frag (CVE-2026-43284) — Linux LPE writeup","modified":"2026-08-02T21:09:31Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/RevyHub/CVE-2026-43284---DirtyFrag-Analysis-THM-"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-08-02T21:09:31Z","url":"https://github.com/RevyHub/CVE-2026-43284---DirtyFrag-Analysis-THM-"}],"tags":[]},{"url":"https://github.com/millikanjohnl-blip/dirtyfrag-detection-rules","source":"poc-in-github","sourceId":"CVE-2026-43284","description":"Detection rules and analysis for Dirty Frag (CVE-2026-43284/CVE-2026-43500) Linux kernel LPE vulnerability. Based on community research and health probe configurations.","modified":"2026-08-05T18:02:41Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/millikanjohnl-blip/dirtyfrag-detection-rules"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-08-05T18:02:41Z","url":"https://github.com/millikanjohnl-blip/dirtyfrag-detection-rules"}],"tags":[]},{"url":"https://github.com/TeamN4C/SG-2026-0024","source":"poc-in-github","sourceId":"CVE-2026-43284","description":"CVE-2026-43284 and CVE-2026-43500 Dirty Frag PoC and exploit","modified":"2026-09-09T12:40:33Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/TeamN4C/SG-2026-0024"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-09-09T12:40:33Z","url":"https://github.com/TeamN4C/SG-2026-0024"}],"tags":[]},{"url":"https://github.com/Minime794/DirtyFrag","source":"poc-in-github","sourceId":"CVE-2026-43284","description":"Linux CVE-2026-43284 & CVE-2026-43500","modified":"2026-09-21T12:03:29Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/Minime794/DirtyFrag"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-09-21T12:03:29Z","url":"https://github.com/Minime794/DirtyFrag"}],"tags":[]},{"url":"https://github.com/mhdnihan/CVE-2026-43284-DIRTY-FRAG-","source":"poc-in-github","sourceId":"CVE-2026-43284","description":"Detailed technical analysis of CVE-2026-43284 (Dirty Frag) local privilege escalation flaw in the Linux kernel.","modified":"2026-09-24T15:02:17Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/mhdnihan/CVE-2026-43284-DIRTY-FRAG-"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-09-24T15:02:17Z","url":"https://github.com/mhdnihan/CVE-2026-43284-DIRTY-FRAG-"}],"tags":[]},{"url":"https://github.com/a2333c/DFRoot","source":"poc-in-github","sourceId":"CVE-2026-43284","description":"三星 Galaxy S25 Ultra（SM-S938B）适配版 DFRoot：开机自动获取 root（DirtyFrag CVE-2026-43284 + CVE-2026-43499 双链路），全中文界面，fork 自 diabl0w/DFRoot","modified":"2026-10-24T11:09:37Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/a2333c/DFRoot"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-10-24T11:09:37Z","url":"https://github.com/a2333c/DFRoot"}],"tags":[]},{"url":"https://github.com/ankitrawatgit/DirtyFrag-Android-Root-Jailbreak","source":"poc-in-github","sourceId":"CVE-2026-43284","description":"DirtyFrag Android Root is an Android app and helper module chain based on DirtyFrag (CVE-2026-43284). Tested on iQOO Z9 5G.","modified":"2026-10-25T18:27:10Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/ankitrawatgit/DirtyFrag-Android-Root-Jailbreak"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-10-25T18:27:10Z","url":"https://github.com/ankitrawatgit/DirtyFrag-Android-Root-Jailbreak"}],"tags":[]},{"url":"https://github.com/HirokiAkihiko/dirtyfrag-research","source":"poc-in-github","sourceId":"CVE-2026-43284","description":"DirtyFrag CVE-2026-43284 research for 5.4-qgki devices","modified":"2026-10-16T03:17:43Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/HirokiAkihiko/dirtyfrag-research"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-10-16T03:17:43Z","url":"https://github.com/HirokiAkihiko/dirtyfrag-research"}],"tags":[]},{"url":"https://github.com/RemiPelloux/GalaxyCrash","source":"poc-in-github","sourceId":"CVE-2026-43284","description":"Ephemeral root for Samsung Galaxy devices via CVE-2026-43284 — stability fork of DirtyFrag. Reboot to undo.","modified":"2026-10-25T15:55:32Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/RemiPelloux/GalaxyCrash"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-10-25T15:55:32Z","url":"https://github.com/RemiPelloux/GalaxyCrash"}],"tags":[]},{"url":"https://github.com/yameteeee-kudasaiiiiiii90/DFRoot","source":"poc-in-github","sourceId":"CVE-2026-43284","description":"Fork of datfooldive/DFRoot (DirtyFrag CVE-2026-43284, ReSukiSU) + GitHub Actions APK build","modified":"2026-10-25T20:26:31Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-43284","url":"https://github.com/yameteeee-kudasaiiiiiii90/DFRoot"},{"source":"poc-in-github","sourceId":"CVE-2026-43284","modified":"2026-10-25T20:26:31Z","url":"https://github.com/yameteeee-kudasaiiiiiii90/DFRoot"}],"tags":[]}],"test_commands":[{"tool":"searchsploit","cmd":"searchsploit --cve CVE-2026-43284 && searchsploit -m 52591","note":"Fetch the ExploitDB PoC locally; review the code before running it."},{"tool":"searchsploit","cmd":"searchsploit --cve CVE-2026-43284 && searchsploit -m 52585","note":"Fetch the ExploitDB PoC locally; review the code before running it."},{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2026-43284/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}],"detection_sources":[],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2026-43284%22&type=repositories","executable":false}]}