Linux Dirty Frag Exploit Execution (Dirtyfrag)

Danny Y@zendannyy

•updated May 8, 2026•48•0•2,813

Detects the execution of the public Dirty Frag exploit tool by monitoring for its hardcoded command-line arguments (--force-esp, --force-rxrpc). This vulnerability allows local attackers to gain root privileges via page-cache tampering in the Linux kernel without race conditions.