Another Vulunerabilty found in Kernel: "Fragnesia" a variant of Dirty Frag vulnerability in the ESP/XFRM

[Bink]

The mitigation for Fragnesia appears to be the same as that for Dirty Frag.

Another vulnerability that gives root access: dirty-frag (FIXED with Linux kernel 7.0.5 Update)

This is the mitigation being shared by most sources: Mitigation Because the responsible disclosure schedule and the embargo have been broken, no patch exists for any distribution. Use the following command to remove the modules in which the vulnerabilities occur. sh -c "printf 'install esp4 /bin/false\ninstall esp6 /bin/false\ninstall rxrpc /bin/false\n' > /etc/modprobe.d/dirtyfrag.conf; rmmod esp4 esp6 rxrpc 2>/dev/null; true" Once each distribution backports a patch, update accordingly. …

If you’re not needing IPSec (sorry @Archie1 ), or using the Andrew File System (AFS), I suspect you could simply leave these modules disabled…