XFRM — PoC Archivehttps://poc.intelseclab.com/tags/xfrm/Latest proof-of-concept entries.Hugoen-usSun, 28 Jun 2026 00:00:00 +0000DirtyClone — Linux Kernel LPE via Cloned Packet Page-Cache Overwrite (CVE-2026-43503)https://poc.intelseclab.com/pocs/binary/2026-06-28_dirtyclone-cve-2026-43503-lpe/Sun, 28 Jun 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-06-28_dirtyclone-cve-2026-43503-lpe/High severity (CVSS 8.8) — binary · CVE-2026-43503. Status: Weaponized. Affects: Linux kernel (netfilter TEE / __pskb_copy_fclone()). Tags: LPE, Linux kernel, netfilter, TEE, IPsec, XFRM, page-cache, file-backed memory, DirtyFrag, skb, privilege escalation, C, in-the-wild.binaryHighLPELinux kernelnetfilterTEEIPsecXFRMpage-cachefile-backed memoryDirtyFragskbprivilege escalationCin-the-wildLinux XFRM ESP-in-TCP Local Privilege Escalation (Fragnesia)https://poc.intelseclab.com/pocs/binary/2026-05-14_linux-xfrm-fragnesia-lpe/Thu, 14 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-05-14_linux-xfrm-fragnesia-lpe/High severity (CVSS 7.8) — binary · CVE-2026-46300. Status: Weaponized. Affects: Linux kernel (XFRM ESP-in-TCP subsystem). Tags: LPE, privilege-escalation, kernel, XFRM, ESP-in-TCP, page-cache, write-primitive, unprivileged.binaryHighLPEprivilege-escalationkernelXFRMESP-in-TCPpage-cachewrite-primitiveunprivilegedDirty Frag: Linux XFRM/RxRPC Page Cache Write Chain LPEhttps://poc.intelseclab.com/pocs/binary/2026-05-14_linux-xfrm-rxrpc-lpe/Thu, 14 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-05-14_linux-xfrm-rxrpc-lpe/Critical severity (CVSS 7.8) — binary · CVE-2026-43500, CVE-2026-43284. Status: Weaponized. Affects: Linux kernel. Tags: LPE, Linux kernel, page-cache, xfrm, RxRPC, local, unauthenticated, Dirty Pipe variant.binaryCriticalLPELinux kernelpage-cachexfrmRxRPClocalunauthenticatedDirty Pipe variant