{"uuid": "6703e31a-3fc0-42c9-8b43-a9226f903c4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43503", "type": "seen", "source": "https://t.me/pphm_HackerNews/1679", "content": "\ud83d\udd34 DirtyClone: Fourth Linux Kernel Flaw in Six Weeks Escalates to Root\n\nJFrog Security Research published a working exploit walkthrough on June 25 for CVE-2026-43503 (CVSS score of 8.8), a Linux kernel privilege escalation they call DirtyClone. It\u2019s the fourth vulnerability in the DirtyFrag family, all sharing the same root failure: file-backed memory gets treated as packet data, and an in-place network operation writes where it should have copied. CVSSIf your kernel doesn\u2019t have the May 21 mainline patch, update now.\n\n\u201cThe severity of this issue is significant because it allows any unprivileged local user to gain root access (LPE) by manipulating the Linux page cache.\u201d reads the report published by JFrog. \u201cThe attack is silent, leaves no kernel logs or audit traces, and bypasses common on-disk integrity monitoring tools.\u201d", "creation_timestamp": "2026-08-22T00:00:27.407314Z"}