Re: Unidentified Fragnesia Variant with Public PoC

[Jiayuan Chen <jiayuan.chen@linux.dev>]

On 5/28/26 11:12 PM, Wade Sparks wrote:
> Hello netdev team,
> (cc: security@kernel.org)
>
> The VulnCheck Research team recently discovered and successfully 
> reproduced a *public* proof of concept 
> <https://github.com/v12-security/pocs/tree/main/fragnesia-5db89c99566fc> (PoC) 
> published by V12 Security that targets an unidentified variant of 
> CVE-2026-46300, referred to as Fragnesia.
>
> The original Fragnesia patch only addressed the coalesce path, leaving 
> the segmentation path independently exploitable. We confirmed the PoC 
> works on the latest Ubuntu kernel release 
> <https://ubuntu.com/about/release-cycle> as of 2026-05-27 (we are in 
> the process of re-testing against v7.0.10 of the kernel.org release 
> <https://kernel.org/>). The variant is distinct enough to warrant its 
> own patch, as it operates in a different function with a different 
> trigger path that survives the existing fix.
>
> If there is an existing patch that apparently has not made it's way to 
> Ubuntu distributions, we'd greatly appreciate if you could flag so 
> that we may initiate the CVE assignment process with kernel.org 
> <http://kernel.org> CNA.


Maybe this commit 48f6a5356a33 fixed the variant you mentioned above ?