Vulnerabilitymedium

New DirtyClone Linux Kernel Flaw Lets Local Users Gain Root via Cloned Packets

The Hacker Newsby @TheHackersNewsJun 26, 2026 · 13:40 UTC (Jun 26, 2026)3 min read1 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2026-43503 CVE-2026-31431 CVE-2026-43284 CVE-2026-43500 CVE-2026-46300

Tags: cve-2026-31431 cve-2026-43284 cve-2026-43500 cve-2026-43503 cve-2026-46300 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2026-31431	Local Privilege Escalation (Copy Fail) in Linux Kernel algif_aead Interface	7.8	98%	KEVPoC ×12	Apr 22, 2026 KEV May 1, 2026
CVE-2026-43284	Linux kernel ESP-in-UDP decrypts in place over shared splice pages (CWE-123)	8.8	94%	PoC	May 8, 2026
CVE-2026-43500	Out-of-bounds write in Linux kernel AF_RXRPC decryption enables root access	7.8	93%		May 11, 2026
CVE-2026-46300 +1 related CVE CVE-2026-43503	Shared-frag marker loss in Linux kernel skb coalescing (LPE)	7.8 group max	16%	KEVPoC	May 23, 2026 KEV Oct 28, 2026

From the original article

3 min read at thehackernews.com

DirtyClone is a new Linux kernel privilege escalation in the DirtyFrag family. JFrog Security Research published a working exploit walkthrough for the flaw on June 25, the first public demonstration for this variant. Tracked as CVE-2026-43503 (CVSS 8.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.