There is a kernel security problem – update your system immediately!

WalterH

'Dirty Frag' is the third privilege escalation vulnerability, or combination of vulnerabilities, in the Linux kernel to be disclosed in the last two weeks. You can read the German article: 'Dirty Frag': Linux-Lücken verschaffen root-Rechte, sorry it is in German ;-).
'Fragnesia' (CVE-2026-46300) is now the forth privilege escalation vulnerability.
You can read the German article: 'Fragnesia': Nächste Rechteausweitungslücke im Linux-Kernel

Read the second post to find out how to update your system.

WalterH

How can the system be updated?

Please note that the update can also be performed using the GUI. However, I prefer to update via the command line as we get more information about the system and the update process.

1. Log on to your system

Use a SSH client such as PuTTY to log on to your system in order to be able to copy and paste the commands.

2. Update the system

First, use the grommunio update command to update the system, but do not reboot it:
grommunio-update update --noreboot.

3. Run the update again

On some Debian systems I have seen, we need to run the update again to install the current kernel. Now, we use the update mechanism of the distribution.

For openSUSE, use:
zypper ref; zypper up

For Debian, use:
apt update; apt upgrade

4. Check for the new kernel

In the /boot/ directory, you should now find three kernels: an old kernel, the currently running kernel, and the newest kernel. Show the contents of the /boot/ directory with:
ls -lart /boot/

5. Show the running kernel with

uname -r

If you have a newer kernel in /boot/, reboot the system:
init 6

6. After rebooting,

verify the running kernel with uname -r and compare the kernel version with the list below.

7. The current kernels are at 11. May. 2026 are:

openSUSE 15.6: 6.4.0-150600.23.100-default Released May 1. 2026
openSUSE 16.0: 6.12.0-160000.29-default Released May 1. 2026
Debian 12: 6.1.0-47-amd64 Released 2026-05-08
Debian 13: 6.12.86+deb13-amd64 Released 2026-05-08

7.1. The current kernels are at 15. May. 2026 are:

openSUSE 15.6: 6.4.0-150600.23.103-default Released May 8. 2026
openSUSE 16.0: 6.12.0-160000.30-default Released May 8. 2026
Debian 12: 6.1.0-48-amd64 Released 2026-05-15
Debian 13: 6.12.88+deb13-amd64 Released 2026-05-15

7.2. The current kernels are at 15. May. 2026 are:

openSUSE 16.0: 6.12.0-160000.31-default Released May 14. 2026

7.3. The current kernels are at 22. May. 2026 are:

openSUSE 16.0: 6.12.0-160000.32-default Released May 15. 2026

7.4. The current kernels are at 24. May. 2026 are:

Debian 13: 6.12.90+deb13-amd64 Released 2026-05-22

7.5. The current kernels are at 28. May. 2026 are:

Debian 12: 6.1.0-49-amd64 Released 2026-05-25

7.6. The current kernels are at 30. May. 2026 are:

openSUSE 16.0: 6.12.0-160000.33-default Released May 25. 2026

8. Knowledge Base Article

9. Summary

As of May 14, 2026, the situation is as follows:
If neither a VPN tunnel nor the RxRPC protocol is enabled on your system, then your system is not affected by these two security vulnerabilities Copy.Fail2 aka DirtyFrag (CVE-2026-43284 / CVE-2026-43500) and Fragnesia (CVE-2026-46300).

However, it is always a good idea to keep the system up to date. Therefore, perform the update using
grommunio-update update --noreboot and reboot if necessary.

Enjoy Grommunio!