Fragnesia and friends: When page cache vulnerabilities keep coming back

The article examines a recurring pattern of Linux kernel vulnerabilities targeting page cache manipulation — including Copy-Fail, Dirty Frag, Fragnesia, and DirtyDecrypt — that emerged within a 14-day window. Rather than treating each as an isolated CVE, Rickerd argues organizations should focus on architectural resilience through defense-in-depth strategies, demonstrating how Red Hat OpenShift’s layered security controls (including SELinux, security context constraints, and user namespaces) successfully prevented exploitation even on vulnerable kernels.