Dirty Frag: A new Linux privilege escalation vulnerability is already in the wild

Multiple high‑risk vulnerabilities and active campaigns reported: a newly disclosed Linux kernel privilege‑escalation dubbed “Dirty Frag” has a public working exploit enabling local unprivileged users to gain root on major distributions (Ubuntu, RHEL, Fedora) and remains unpatched; Palo Alto PAN‑OS zero‑day (CVE‑2026‑0300, CVSS 9.3) is being actively exploited by suspected nation‑state actors to gain root and deploy tunneling tools; CISA added PAN‑OS CVE‑2026‑0300 and Ivanti EPMM CVE‑2026‑6973 (CVSS 7.1) to its Known Exploited Vulnerabilities catalog; Cisco patched multiple high‑severity flaws