A new critical vulnerability named Fragnesia has been discovered on Linux systems. Here is what you need to know to spread the word:
The Impact: It allows for local privilege escalation. An attacker who already has standard, limited user access to the machine (via an existing SSH account or by exploiting another vulnerability) can elevate their privileges to Root (full administrative control).
How It Works: The flaw targets the Page Cache, a memory optimization feature in Linux. The attacker corrupts the version of a system file stored in the RAM. Even if the original file remains safe and "read-only" on the hard drive, the altered version in memory bypasses system security.
The Exploit: The Proof of Concept (PoC) uses the standard su command (used to switch users). By modifying this binary directly inside the memory cache, the attacker triggers a root shell, granting them full admin permissions.
Current Status: Linux kernel developers are taking this very seriously. A proposal is currently being considered to completely disable this Page Cache optimization, at least temporarily, until the core issues are fully patched.
Recommendation: Keep a close eye out and apply security updates from your Linux distribution as soon as they become available!
0 comments