Critical New Linux Zero-Day Leaked—What Admins Need To Do Now

Security researchers publicly disclosed Dirty Frag, a Linux kernel privilege-escalation zero-day in the algif_aead interface.

The bug is tracked as CVE-2026-43284 and can potentially grant immediate root access on many Linux distributions.

An embargo was broken, and exploit code is now public, raising the risk of rapid real-world weaponization.

No patch is available yet, so major Linux users and defenders need to monitor for updates and temporary mitigations.