Sources
Primary artifacts belong to kernel.org, NVD/CVE.org, Linux distributors, and national CERT programs. Vendor blogs labeled below provide commentary; confirm facts against primary entries before contractual or regulatory filings.
Researcher disclosure (primary narrative and PoC)
CVE and national vulnerability databases
Government and CERT alerts
Distribution maintainer portals
- Ubuntu Security - CVE-2026-43284
- Ubuntu Security - CVE-2026-43500
- Ubuntu blog - Dirty Frag vulnerability fixes available
- Debian Security Tracker - CVE-2026-43284
- Debian Security Tracker - CVE-2026-43500
- Red Hat Customer Portal - CVE-2026-43284
- Red Hat Customer Portal - CVE-2026-43500
- Red Hat Bugzilla - CVE-2026-43284 tracker