<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 26 Jun 2026 23:49:48 +0000</lastBuildDate>
    <item>
      <title>78f5b49f-be5c-479f-9c93-62dbd90b5506</title>
      <link>https://vulnerability.circl.lu/sighting/78f5b49f-be5c-479f-9c93-62dbd90b5506/export</link>
      <description>{"uuid": "78f5b49f-be5c-479f-9c93-62dbd90b5506", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43503", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mp7amcxnam27", "content": "6/ \ud83d\udc27 DirtyClone (CVE-2026-43503, CVSS 8.8): New Linux kernel privilege escalation flaw. JFrog published a working exploit walkthrough. Local user. corrupt memory via cloned network packet. gain root. Patch your Linux systems today.", "creation_timestamp": "2026-06-26T15:20:18.700180Z"}</description>
      <content:encoded>{"uuid": "78f5b49f-be5c-479f-9c93-62dbd90b5506", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43503", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mp7amcxnam27", "content": "6/ \ud83d\udc27 DirtyClone (CVE-2026-43503, CVSS 8.8): New Linux kernel privilege escalation flaw. JFrog published a working exploit walkthrough. Local user. corrupt memory via cloned network packet. gain root. Patch your Linux systems today.", "creation_timestamp": "2026-06-26T15:20:18.700180Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/78f5b49f-be5c-479f-9c93-62dbd90b5506/export</guid>
      <pubDate>Fri, 26 Jun 2026 15:20:18 +0000</pubDate>
    </item>
    <item>
      <title>b4f39c2f-5479-452d-98e1-2c6399f25bb4</title>
      <link>https://vulnerability.circl.lu/sighting/b4f39c2f-5479-452d-98e1-2c6399f25bb4/export</link>
      <description>{"uuid": "b4f39c2f-5479-452d-98e1-2c6399f25bb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43503", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mp7amcxo7u27", "content": "6/ \ud83d\udc27 DirtyClone (CVE-2026-43503, CVSS 8.8): New Linux kernel privilege escalation flaw. JFrog published a working exploit walkthrough. Local user. corrupt memory via cloned network packet. gain root. Patch your Linux systems today.", "creation_timestamp": "2026-06-26T15:20:19.542412Z"}</description>
      <content:encoded>{"uuid": "b4f39c2f-5479-452d-98e1-2c6399f25bb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43503", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mp7amcxo7u27", "content": "6/ \ud83d\udc27 DirtyClone (CVE-2026-43503, CVSS 8.8): New Linux kernel privilege escalation flaw. JFrog published a working exploit walkthrough. Local user. corrupt memory via cloned network packet. gain root. Patch your Linux systems today.", "creation_timestamp": "2026-06-26T15:20:19.542412Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b4f39c2f-5479-452d-98e1-2c6399f25bb4/export</guid>
      <pubDate>Fri, 26 Jun 2026 15:20:19 +0000</pubDate>
    </item>
    <item>
      <title>851e7b93-be0d-41f5-a0ca-b96413b616da</title>
      <link>https://vulnerability.circl.lu/sighting/851e7b93-be0d-41f5-a0ca-b96413b616da/export</link>
      <description>{"uuid": "851e7b93-be0d-41f5-a0ca-b96413b616da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43503", "type": "seen", "source": "https://thehackernews.com/2026/06/new-dirtyclone-linux-kernel-flaw-lets.html", "content": "DirtyClone is a new Linux kernel privilege escalation in the DirtyFrag family.&amp;nbsp;JFrog Security Research published a working exploit walkthrough&amp;nbsp;for the flaw on June 25, the first public demonstration for this variant.\n\nTracked as&amp;nbsp;CVE-2026-43503&amp;nbsp;(CVSS 8.8), it lets a local user corrupt file-backed memory through a cloned network packet and gain root. The patch landed in", "creation_timestamp": "2026-06-26T16:00:53.324938Z"}</description>
      <content:encoded>{"uuid": "851e7b93-be0d-41f5-a0ca-b96413b616da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43503", "type": "seen", "source": "https://thehackernews.com/2026/06/new-dirtyclone-linux-kernel-flaw-lets.html", "content": "DirtyClone is a new Linux kernel privilege escalation in the DirtyFrag family.&amp;nbsp;JFrog Security Research published a working exploit walkthrough&amp;nbsp;for the flaw on June 25, the first public demonstration for this variant.\n\nTracked as&amp;nbsp;CVE-2026-43503&amp;nbsp;(CVSS 8.8), it lets a local user corrupt file-backed memory through a cloned network packet and gain root. The patch landed in", "creation_timestamp": "2026-06-26T16:00:53.324938Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/851e7b93-be0d-41f5-a0ca-b96413b616da/export</guid>
      <pubDate>Fri, 26 Jun 2026 16:00:53 +0000</pubDate>
    </item>
    <item>
      <title>1099c449-75bb-4ba1-8e92-d0b629364905</title>
      <link>https://vulnerability.circl.lu/sighting/1099c449-75bb-4ba1-8e92-d0b629364905/export</link>
      <description>{"uuid": "1099c449-75bb-4ba1-8e92-d0b629364905", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-43503", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mp7ihctsts23", "content": "Two new Linux LPEs hit page cache from opposite ends of the\u00a0kernel\n\nTwo new Linux kernel LPEs, CVE-2026-46331 (pedit COW) and CVE-2026-43503 (DirtyClone), corrupt page-cache memory to gain root without\u2026\n\nhttps://thecybersecguru.com/news/linux-lpe-pedit-cow-dirtyclone-cve-2026-46331-cve-2026-43503/", "creation_timestamp": "2026-06-26T17:40:26.301772Z"}</description>
      <content:encoded>{"uuid": "1099c449-75bb-4ba1-8e92-d0b629364905", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-43503", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mp7ihctsts23", "content": "Two new Linux LPEs hit page cache from opposite ends of the\u00a0kernel\n\nTwo new Linux kernel LPEs, CVE-2026-46331 (pedit COW) and CVE-2026-43503 (DirtyClone), corrupt page-cache memory to gain root without\u2026\n\nhttps://thecybersecguru.com/news/linux-lpe-pedit-cow-dirtyclone-cve-2026-46331-cve-2026-43503/", "creation_timestamp": "2026-06-26T17:40:26.301772Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1099c449-75bb-4ba1-8e92-d0b629364905/export</guid>
      <pubDate>Fri, 26 Jun 2026 17:40:26 +0000</pubDate>
    </item>
    <item>
      <title>a9264ff4-c8f1-4190-9e5b-e5140f577214</title>
      <link>https://vulnerability.circl.lu/sighting/a9264ff4-c8f1-4190-9e5b-e5140f577214/export</link>
      <description>{"uuid": "a9264ff4-c8f1-4190-9e5b-e5140f577214", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43503", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mp7iqwdwko2j", "content": "DirtyClone (CVE-2026-43503) lets unprivileged users gain root via cloned packets. Patch now. #DirtyClone #LinuxKernel #Security #PrivilegeEscalation #CyberSecurity #Vulnerability thedailytechfeed.com/dirtyclone-v...", "creation_timestamp": "2026-06-26T17:45:49.190273Z"}</description>
      <content:encoded>{"uuid": "a9264ff4-c8f1-4190-9e5b-e5140f577214", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43503", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mp7iqwdwko2j", "content": "DirtyClone (CVE-2026-43503) lets unprivileged users gain root via cloned packets. Patch now. #DirtyClone #LinuxKernel #Security #PrivilegeEscalation #CyberSecurity #Vulnerability thedailytechfeed.com/dirtyclone-v...", "creation_timestamp": "2026-06-26T17:45:49.190273Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a9264ff4-c8f1-4190-9e5b-e5140f577214/export</guid>
      <pubDate>Fri, 26 Jun 2026 17:45:49 +0000</pubDate>
    </item>
    <item>
      <title>db04a421-1870-409e-9618-d5cd7835086d</title>
      <link>https://vulnerability.circl.lu/sighting/db04a421-1870-409e-9618-d5cd7835086d/export</link>
      <description>{"uuid": "db04a421-1870-409e-9618-d5cd7835086d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43503", "type": "seen", "source": "https://bsky.app/profile/lasenal.bsky.social/post/3mp7lbxjdc727", "content": "DirtyClone: escalada local en el kernel de Linux.\n\nCVE-2026-43503 (CVSS 8.8) deja a un usuario local con CAP_NET_ADMIN llegar a root. Ya hay parche en el kernel principal y backports en ramas estables y LTS. Actualiza.\n\nLeer en Ubuntu Security\n\n#LaSe\u00f1alNews #Ciberseguridad #InfoSec", "creation_timestamp": "2026-06-26T18:31:08.000292Z"}</description>
      <content:encoded>{"uuid": "db04a421-1870-409e-9618-d5cd7835086d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43503", "type": "seen", "source": "https://bsky.app/profile/lasenal.bsky.social/post/3mp7lbxjdc727", "content": "DirtyClone: escalada local en el kernel de Linux.\n\nCVE-2026-43503 (CVSS 8.8) deja a un usuario local con CAP_NET_ADMIN llegar a root. Ya hay parche en el kernel principal y backports en ramas estables y LTS. Actualiza.\n\nLeer en Ubuntu Security\n\n#LaSe\u00f1alNews #Ciberseguridad #InfoSec", "creation_timestamp": "2026-06-26T18:31:08.000292Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/db04a421-1870-409e-9618-d5cd7835086d/export</guid>
      <pubDate>Fri, 26 Jun 2026 18:31:08 +0000</pubDate>
    </item>
    <item>
      <title>965aa372-33ac-4adc-a4bc-22de7554ff00</title>
      <link>https://vulnerability.circl.lu/sighting/965aa372-33ac-4adc-a4bc-22de7554ff00/export</link>
      <description>{"uuid": "965aa372-33ac-4adc-a4bc-22de7554ff00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43503", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/116818038432990301", "content": "The DirtyClone vulnerability (CVE-2026-43503) is a high-severity Linux kernel flaw that allows unprivileged users to gain root access by manipulating cloned network packets within the XFRM/IPsec subsystem. Attackers exploit the improper handling of the SKBFL_SHARED_FRAG flag to modify cached system files without leaving detectable logs or audit trails.https://cybersecuritynews.com/dirtyclone-linux-vulnerability/", "creation_timestamp": "2026-06-26T19:23:36.000693Z"}</description>
      <content:encoded>{"uuid": "965aa372-33ac-4adc-a4bc-22de7554ff00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43503", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/116818038432990301", "content": "The DirtyClone vulnerability (CVE-2026-43503) is a high-severity Linux kernel flaw that allows unprivileged users to gain root access by manipulating cloned network packets within the XFRM/IPsec subsystem. Attackers exploit the improper handling of the SKBFL_SHARED_FRAG flag to modify cached system files without leaving detectable logs or audit trails.https://cybersecuritynews.com/dirtyclone-linux-vulnerability/", "creation_timestamp": "2026-06-26T19:23:36.000693Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/965aa372-33ac-4adc-a4bc-22de7554ff00/export</guid>
      <pubDate>Fri, 26 Jun 2026 19:23:36 +0000</pubDate>
    </item>
    <item>
      <title>ba18a830-28e1-40e8-8285-b6033e6b02a9</title>
      <link>https://vulnerability.circl.lu/sighting/ba18a830-28e1-40e8-8285-b6033e6b02a9/export</link>
      <description>{"uuid": "ba18a830-28e1-40e8-8285-b6033e6b02a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43503", "type": "seen", "source": "https://threatintel.cc/2026/06/26/new-dirtyclone-linux-vulnerability-allows.html", "content": "New DirtyClone Linux Vulnerability Allows Attackers to Gain Root Access Via Cloned Packets\n\nThe DirtyClone vulnerability (CVE-2026-43503) is a high-severity Linux kernel flaw that allows unprivileged users to gain root access by manipulating cloned network packets within the XFRM/IPsec subsystem. Attackers exploit the improper handling of the SKBFL_SHARED_FRAG flag to modify cached system files without leaving detectable logs or audit trails.", "creation_timestamp": "2026-06-26T22:00:52.656266Z"}</description>
      <content:encoded>{"uuid": "ba18a830-28e1-40e8-8285-b6033e6b02a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43503", "type": "seen", "source": "https://threatintel.cc/2026/06/26/new-dirtyclone-linux-vulnerability-allows.html", "content": "New DirtyClone Linux Vulnerability Allows Attackers to Gain Root Access Via Cloned Packets\n\nThe DirtyClone vulnerability (CVE-2026-43503) is a high-severity Linux kernel flaw that allows unprivileged users to gain root access by manipulating cloned network packets within the XFRM/IPsec subsystem. Attackers exploit the improper handling of the SKBFL_SHARED_FRAG flag to modify cached system files without leaving detectable logs or audit trails.", "creation_timestamp": "2026-06-26T22:00:52.656266Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ba18a830-28e1-40e8-8285-b6033e6b02a9/export</guid>
      <pubDate>Fri, 26 Jun 2026 22:00:52 +0000</pubDate>
    </item>
    <item>
      <title>c77f7852-2a88-4529-b36a-38bbfec6984d</title>
      <link>https://vulnerability.circl.lu/sighting/c77f7852-2a88-4529-b36a-38bbfec6984d/export</link>
      <description>{"uuid": "c77f7852-2a88-4529-b36a-38bbfec6984d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43503", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mp7xi65dnc2e", "content": "DirtyClone (CVE-2026-43503): The Silent Linux Kernel Flaw That Lets Any Local User Own Root Without Leaving a Trace +\u00a0Video\n\nIntroduction: A newly discovered Linux kernel vulnerability, tracked as CVE-2026-43503 and dubbed \"DirtyClone,\" allows any unprivileged local user to escalate privileges to\u2026", "creation_timestamp": "2026-06-26T22:09:21.014106Z"}</description>
      <content:encoded>{"uuid": "c77f7852-2a88-4529-b36a-38bbfec6984d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43503", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mp7xi65dnc2e", "content": "DirtyClone (CVE-2026-43503): The Silent Linux Kernel Flaw That Lets Any Local User Own Root Without Leaving a Trace +\u00a0Video\n\nIntroduction: A newly discovered Linux kernel vulnerability, tracked as CVE-2026-43503 and dubbed \"DirtyClone,\" allows any unprivileged local user to escalate privileges to\u2026", "creation_timestamp": "2026-06-26T22:09:21.014106Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c77f7852-2a88-4529-b36a-38bbfec6984d/export</guid>
      <pubDate>Fri, 26 Jun 2026 22:09:21 +0000</pubDate>
    </item>
    <item>
      <title>715f49e4-be31-4f99-860d-989d2c3181d3</title>
      <link>https://vulnerability.circl.lu/sighting/715f49e4-be31-4f99-860d-989d2c3181d3/export</link>
      <description>{"uuid": "715f49e4-be31-4f99-860d-989d2c3181d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-43503", "type": "seen", "source": "https://infosec.exchange/ap/users/116810780845358081/statuses/116817639137560514", "content": "Two new Linux LPEs just landed with public exploit paths.\npedit COW (CVE-2026-46331) + DirtyClone (CVE-2026-43503) both hit the same nightmare target: the page cache.\nNo disk changes.No file-integrity alert.Just corrupted in-memory binaries \u2192 root.\nIf you run CI/CD runners, Kubernetes nodes, shared Linux hosts, rootless containers, or multi-tenant servers, patch this fast.\nFull breakdown:https://thecybersecguru.com/news/linux-lpe-pedit-cow-dirtyclone-cve-2026-46331-cve-2026-43503/\n#Linux #Cybersecurity #InfoSec #Kernel #CVE #LinuxSecurity #PrivilegeEscalation #LPE #DirtyClone #RedHat #Debian #Ubuntu #Kubernetes #DevSecOps", "creation_timestamp": "2026-06-26T23:30:18.980600Z"}</description>
      <content:encoded>{"uuid": "715f49e4-be31-4f99-860d-989d2c3181d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-43503", "type": "seen", "source": "https://infosec.exchange/ap/users/116810780845358081/statuses/116817639137560514", "content": "Two new Linux LPEs just landed with public exploit paths.\npedit COW (CVE-2026-46331) + DirtyClone (CVE-2026-43503) both hit the same nightmare target: the page cache.\nNo disk changes.No file-integrity alert.Just corrupted in-memory binaries \u2192 root.\nIf you run CI/CD runners, Kubernetes nodes, shared Linux hosts, rootless containers, or multi-tenant servers, patch this fast.\nFull breakdown:https://thecybersecguru.com/news/linux-lpe-pedit-cow-dirtyclone-cve-2026-46331-cve-2026-43503/\n#Linux #Cybersecurity #InfoSec #Kernel #CVE #LinuxSecurity #PrivilegeEscalation #LPE #DirtyClone #RedHat #Debian #Ubuntu #Kubernetes #DevSecOps", "creation_timestamp": "2026-06-26T23:30:18.980600Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/715f49e4-be31-4f99-860d-989d2c3181d3/export</guid>
      <pubDate>Fri, 26 Jun 2026 23:30:18 +0000</pubDate>
    </item>
  </channel>
</rss>
