Fragnesia - CVE-2026-46300

Rocky Linux Help & Support
1

If Rocky Linux is affected by this CVE-2026-46300

POC: pocs/fragnesia/README.md at main · v12-security/pocs · GitHub

4

If the github link is accurate, then this vulnerability would affect Rocky Linux (because Rocky was vulnerable to DirtyFrag).

Rocky has patched kernels available in the new security repo; run dnf update to get the latest repo definitions, then dnf --enablerepo=security update to get the patched kernel, then reboot to run the patched kernel.

Also according to the link, the mitigation is the same as for DirtyFrag – useful if you can’t reboot immediately.

Edit: It doesn’t necessarily follow that Rocky’s DirtyFrag patch fixes this one. After further reading, I’m guessing it doesn’t.

5

I’ve just attempted this on Rocky 8.10 with the latest kernel installed from the new security repo and has given me root access

6

Yep, it requires an additional fix, so all versions are affected. There’s already a RHEL page for this that shows what is affected. I guess a fix will appear in the next couple of days.

7

The kernel patch is different: net: skbuff: preserve shared-frag marker during coalescing

So it requires an additional fix as @iwalker said.

8

any update? still no fix?

9

@iwalker Following up on this, could you please share the ETA for the fix?

10

Well Red Hat haven’t even released a fix yet, but I’ve posted an internal message to find out if our team has an ETA for an interim fix.

11

Hello,
Is it fixed by kernel-*-5.14.0-611.55.1.el9_7.0.3.x86_64.rpm just now available on Rocky Linux Repository ?
Where can I find what is fixed with this version ? There is nothing on product errata (Rocky Enterprise Software Foundation Product Errata)

12

Yes.

Changelog for kernel-5.14.0-611.55.1.el9_7.0.3.x86_64

  • Mon May 18 2026 Jonathan Dieter jdieter@resf.org - 5.14.0-611.55.1.0.3

  • ptrace: slightly saner ‘get_dumpable()’ logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}

  • Thu May 14 2026 Jonathan Dieter jdieter@resf.org - 5.14.0-611.55.1.0.2

  • net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}

  • Drop rxrpc patches since upstream has decided not to carry them. Users of kernel-modules-partner are now
    vulnerable to CVE-2026-43500, but the package is only available in the unsupported devel repo

13

Thanks !
Where you have founded this changelog ? :slight_smile:

14

dnf repoquery --changelog kernel-5.14.0-611.55.1.el9_7.0.3

15

Hi ! My Rocky 9’s get the kernel-5.14.0-611.55.1.el9_7.0.3.x86_64 from the new security-repo now, but there are no new packaces for Rocky 8 in this repo. Does anyone know if there will be a fix for CVE-2026-46300 for Rocky 8 ?

16

Is it possible to have a web page or a sticky forum thread to follow the Rocky specific “Security releases” ? It is hard to keep track or find out the information of all the versions.

Things to include in the information could be (for each Rocky release, 8,9,10, …):
latest version of rocky security kernel, what have been fixed in this version, latest RHEL/upstream kernel, additional thing to do if needed (to fix security issues).

17

This would be pointless since the errata should have all the security information anyway and generated automatically. I’ll raise it internally to find out why the errata is not up-to-date and what we plan on doing about that. To do something additional then means spending more time on something else doing all of that manually collating it and preparing a webpage, etc. Unless someone wants to volunteer and do that? Otherwise, there are far more important things for the team to spend their time on.

18

Is a fix currently available for Rocky 8.10? I don’t see any version newer than 4.18.0-553.123.1.el8_10.0.1 for Rocky 8.10

19

Yes there is, but you will have to enable the security repository to get the fix. This is the interim fix, which is patched versions of existing kernels. Red Hat haven’t even patched RHEL8 yet so this is why there is no fix in the standard base repositories.

20

have already enabled the security repo and this is what i see

```
$ dnf list kernel
Last metadata expiration check: 0:12:16 ago on Wed May 20 08:03:08 2026.
Installed Packages
kernel.x86_64 4.18.0-553.40.1.el8_10 @baseos
kernel.x86_64 4.18.0-553.123.1.el8_10.0.1 @security
```