CIRCLE WITH A DOT

CVE-2026-43284 / "Dirty Frag" .. Antoher one of those nasty local-privilege-escallations.Quickfix for Centos/Fedora based systems: printf 'install esp4 /bin/false\ninstall esp6 /bin/false\ninstall rxrpc /bin/false\n' > /etc/modprobe.d/dirtyfrag.conf && rmmod esp4 esp6 rxrpc 2>/dev/null; trueCaution: That also effectively disables IPSEC and AFS client support. But it can easily be reverted by removing the file when a patched kernel arrives.#dirtyfrag #cve_2026_43284 #security #centos #fedora #redhat

@harrysintonen yesterday I read that one should not drop caches in a production system. I don’t know if that recommendation was just for performance or if all hell could break loose.