New DirtyClone Linux Kernel Flaw Lets Local Users Gain Root via Cloned Packets

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-06-26 11:51 UTC
  • Importiert: 2026-07-02 08:13 UTC
  • CVSS: 8.8
  • Quelle-ID: thn_global
  • uid_hash: 3ccce1660ac52e2662185a5c7e343740bab26b1c13c0fb3a796e7b5f7016c31f

Inhalt

DirtyClone is a new Linux kernel privilege escalation in the DirtyFrag family. JFrog Security Research published a working exploit walkthrough for the flaw on June 25, the first public demonstration for this variant.

Tracked as CVE-2026-43503 (CVSS 8.8), it lets a local user corrupt file-backed memory through a cloned network packet and gain root. The patch landed in

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-43503

HIGH

8.8

HIGH

8.8

2026-05-23

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews