Details It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43503) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: USB over IP driver; Network file system (NFS) server daemon; SMB network file system; Tracing infrastructure; Ethernet bridge; Ceph Core library; IPv4 networking; IPv6 networking; Netfilter; RxRPC session sockets; X.25 network layer It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when…