Vulnerabilitymedium

DirtyClone: A Linux Privilege Escalation That Leaves No Trace on Disk

Security Affairsby @securityaffairsJun 27, 2026 · 09:12 UTC (Jun 27, 2026)3 min read2 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2026-43503 CVE-2026-31431 CVE-2026-43284 CVE-2026-43500 CVE-2026-46300

Tags: cve-2026-31431 cve-2026-43284 cve-2026-43500 cve-2026-43503 cve-2026-46300 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2026-31431	Local Privilege Escalation (Copy Fail) in Linux Kernel algif_aead Interface	7.8	98%	KEVPoC ×12	Apr 22, 2026 KEV May 1, 2026
CVE-2026-43284	Linux kernel ESP-in-UDP decrypts in place over shared splice pages (CWE-123)	8.8	94%	PoC	May 8, 2026
CVE-2026-43500	Out-of-bounds write in Linux kernel AF_RXRPC decryption enables root access	7.8	93%		May 11, 2026
CVE-2026-46300 +1 related CVE CVE-2026-43503	Shared-frag marker loss in Linux kernel skb coalescing (LPE)	7.8 group max	16%	KEVPoC	May 23, 2026 KEV Oct 28, 2026

From the original article

3 min read at securityaffairs.com

DirtyClone: a Linux kernel privilege escalation that silently rewrites executables in memory, leaving no disk trace. Patch now. JFrog Security Research published a working exploit walkthrough on June 25 for CVE-2026-43503 (CVSS score of 8.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.