Dirty Frag kernel bug enables container escape and host privilege escalation
The newly disclosed Linux kernel zero‑day (CVE‑2026‑43284 & CVE‑2026‑43500), dubbed “Dirty Frag”, lets a local user in a container gain root on the host and potentially escape isolation. Ubuntu’s advisory details mitigations that disable the vulnerable ESP and RxRPC modules until patched kernels are released. The flaw scores 8.8 CVSS, raising urgent DevSecOps concerns.