<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 27 Jun 2026 12:03:06 +0000</lastBuildDate>
    <item>
      <title>db04a421-1870-409e-9618-d5cd7835086d</title>
      <link>https://vulnerability.circl.lu/sighting/db04a421-1870-409e-9618-d5cd7835086d/export</link>
      <description>{"uuid": "db04a421-1870-409e-9618-d5cd7835086d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43503", "type": "seen", "source": "https://bsky.app/profile/lasenal.bsky.social/post/3mp7lbxjdc727", "content": "DirtyClone: escalada local en el kernel de Linux.\n\nCVE-2026-43503 (CVSS 8.8) deja a un usuario local con CAP_NET_ADMIN llegar a root. Ya hay parche en el kernel principal y backports en ramas estables y LTS. Actualiza.\n\nLeer en Ubuntu Security\n\n#LaSe\u00f1alNews #Ciberseguridad #InfoSec", "creation_timestamp": "2026-06-26T18:31:08.000292Z"}</description>
      <content:encoded>{"uuid": "db04a421-1870-409e-9618-d5cd7835086d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43503", "type": "seen", "source": "https://bsky.app/profile/lasenal.bsky.social/post/3mp7lbxjdc727", "content": "DirtyClone: escalada local en el kernel de Linux.\n\nCVE-2026-43503 (CVSS 8.8) deja a un usuario local con CAP_NET_ADMIN llegar a root. Ya hay parche en el kernel principal y backports en ramas estables y LTS. Actualiza.\n\nLeer en Ubuntu Security\n\n#LaSe\u00f1alNews #Ciberseguridad #InfoSec", "creation_timestamp": "2026-06-26T18:31:08.000292Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/db04a421-1870-409e-9618-d5cd7835086d/export</guid>
      <pubDate>Fri, 26 Jun 2026 18:31:08 +0000</pubDate>
    </item>
    <item>
      <title>965aa372-33ac-4adc-a4bc-22de7554ff00</title>
      <link>https://vulnerability.circl.lu/sighting/965aa372-33ac-4adc-a4bc-22de7554ff00/export</link>
      <description>{"uuid": "965aa372-33ac-4adc-a4bc-22de7554ff00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43503", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/116818038432990301", "content": "The DirtyClone vulnerability (CVE-2026-43503) is a high-severity Linux kernel flaw that allows unprivileged users to gain root access by manipulating cloned network packets within the XFRM/IPsec subsystem. Attackers exploit the improper handling of the SKBFL_SHARED_FRAG flag to modify cached system files without leaving detectable logs or audit trails.https://cybersecuritynews.com/dirtyclone-linux-vulnerability/", "creation_timestamp": "2026-06-26T19:23:36.000693Z"}</description>
      <content:encoded>{"uuid": "965aa372-33ac-4adc-a4bc-22de7554ff00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43503", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/116818038432990301", "content": "The DirtyClone vulnerability (CVE-2026-43503) is a high-severity Linux kernel flaw that allows unprivileged users to gain root access by manipulating cloned network packets within the XFRM/IPsec subsystem. Attackers exploit the improper handling of the SKBFL_SHARED_FRAG flag to modify cached system files without leaving detectable logs or audit trails.https://cybersecuritynews.com/dirtyclone-linux-vulnerability/", "creation_timestamp": "2026-06-26T19:23:36.000693Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/965aa372-33ac-4adc-a4bc-22de7554ff00/export</guid>
      <pubDate>Fri, 26 Jun 2026 19:23:36 +0000</pubDate>
    </item>
    <item>
      <title>ba18a830-28e1-40e8-8285-b6033e6b02a9</title>
      <link>https://vulnerability.circl.lu/sighting/ba18a830-28e1-40e8-8285-b6033e6b02a9/export</link>
      <description>{"uuid": "ba18a830-28e1-40e8-8285-b6033e6b02a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43503", "type": "seen", "source": "https://threatintel.cc/2026/06/26/new-dirtyclone-linux-vulnerability-allows.html", "content": "New DirtyClone Linux Vulnerability Allows Attackers to Gain Root Access Via Cloned Packets\n\nThe DirtyClone vulnerability (CVE-2026-43503) is a high-severity Linux kernel flaw that allows unprivileged users to gain root access by manipulating cloned network packets within the XFRM/IPsec subsystem. Attackers exploit the improper handling of the SKBFL_SHARED_FRAG flag to modify cached system files without leaving detectable logs or audit trails.", "creation_timestamp": "2026-06-26T22:00:52.656266Z"}</description>
      <content:encoded>{"uuid": "ba18a830-28e1-40e8-8285-b6033e6b02a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43503", "type": "seen", "source": "https://threatintel.cc/2026/06/26/new-dirtyclone-linux-vulnerability-allows.html", "content": "New DirtyClone Linux Vulnerability Allows Attackers to Gain Root Access Via Cloned Packets\n\nThe DirtyClone vulnerability (CVE-2026-43503) is a high-severity Linux kernel flaw that allows unprivileged users to gain root access by manipulating cloned network packets within the XFRM/IPsec subsystem. Attackers exploit the improper handling of the SKBFL_SHARED_FRAG flag to modify cached system files without leaving detectable logs or audit trails.", "creation_timestamp": "2026-06-26T22:00:52.656266Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ba18a830-28e1-40e8-8285-b6033e6b02a9/export</guid>
      <pubDate>Fri, 26 Jun 2026 22:00:52 +0000</pubDate>
    </item>
    <item>
      <title>c77f7852-2a88-4529-b36a-38bbfec6984d</title>
      <link>https://vulnerability.circl.lu/sighting/c77f7852-2a88-4529-b36a-38bbfec6984d/export</link>
      <description>{"uuid": "c77f7852-2a88-4529-b36a-38bbfec6984d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43503", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mp7xi65dnc2e", "content": "DirtyClone (CVE-2026-43503): The Silent Linux Kernel Flaw That Lets Any Local User Own Root Without Leaving a Trace +\u00a0Video\n\nIntroduction: A newly discovered Linux kernel vulnerability, tracked as CVE-2026-43503 and dubbed \"DirtyClone,\" allows any unprivileged local user to escalate privileges to\u2026", "creation_timestamp": "2026-06-26T22:09:21.014106Z"}</description>
      <content:encoded>{"uuid": "c77f7852-2a88-4529-b36a-38bbfec6984d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43503", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mp7xi65dnc2e", "content": "DirtyClone (CVE-2026-43503): The Silent Linux Kernel Flaw That Lets Any Local User Own Root Without Leaving a Trace +\u00a0Video\n\nIntroduction: A newly discovered Linux kernel vulnerability, tracked as CVE-2026-43503 and dubbed \"DirtyClone,\" allows any unprivileged local user to escalate privileges to\u2026", "creation_timestamp": "2026-06-26T22:09:21.014106Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c77f7852-2a88-4529-b36a-38bbfec6984d/export</guid>
      <pubDate>Fri, 26 Jun 2026 22:09:21 +0000</pubDate>
    </item>
    <item>
      <title>715f49e4-be31-4f99-860d-989d2c3181d3</title>
      <link>https://vulnerability.circl.lu/sighting/715f49e4-be31-4f99-860d-989d2c3181d3/export</link>
      <description>{"uuid": "715f49e4-be31-4f99-860d-989d2c3181d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-43503", "type": "seen", "source": "https://infosec.exchange/ap/users/116810780845358081/statuses/116817639137560514", "content": "Two new Linux LPEs just landed with public exploit paths.\npedit COW (CVE-2026-46331) + DirtyClone (CVE-2026-43503) both hit the same nightmare target: the page cache.\nNo disk changes.No file-integrity alert.Just corrupted in-memory binaries \u2192 root.\nIf you run CI/CD runners, Kubernetes nodes, shared Linux hosts, rootless containers, or multi-tenant servers, patch this fast.\nFull breakdown:https://thecybersecguru.com/news/linux-lpe-pedit-cow-dirtyclone-cve-2026-46331-cve-2026-43503/\n#Linux #Cybersecurity #InfoSec #Kernel #CVE #LinuxSecurity #PrivilegeEscalation #LPE #DirtyClone #RedHat #Debian #Ubuntu #Kubernetes #DevSecOps", "creation_timestamp": "2026-06-26T23:30:18.980600Z"}</description>
      <content:encoded>{"uuid": "715f49e4-be31-4f99-860d-989d2c3181d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-43503", "type": "seen", "source": "https://infosec.exchange/ap/users/116810780845358081/statuses/116817639137560514", "content": "Two new Linux LPEs just landed with public exploit paths.\npedit COW (CVE-2026-46331) + DirtyClone (CVE-2026-43503) both hit the same nightmare target: the page cache.\nNo disk changes.No file-integrity alert.Just corrupted in-memory binaries \u2192 root.\nIf you run CI/CD runners, Kubernetes nodes, shared Linux hosts, rootless containers, or multi-tenant servers, patch this fast.\nFull breakdown:https://thecybersecguru.com/news/linux-lpe-pedit-cow-dirtyclone-cve-2026-46331-cve-2026-43503/\n#Linux #Cybersecurity #InfoSec #Kernel #CVE #LinuxSecurity #PrivilegeEscalation #LPE #DirtyClone #RedHat #Debian #Ubuntu #Kubernetes #DevSecOps", "creation_timestamp": "2026-06-26T23:30:18.980600Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/715f49e4-be31-4f99-860d-989d2c3181d3/export</guid>
      <pubDate>Fri, 26 Jun 2026 23:30:18 +0000</pubDate>
    </item>
    <item>
      <title>92807ffb-99a0-4d42-8024-fd1277790d37</title>
      <link>https://vulnerability.circl.lu/sighting/92807ffb-99a0-4d42-8024-fd1277790d37/export</link>
      <description>{"uuid": "92807ffb-99a0-4d42-8024-fd1277790d37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43503", "type": "seen", "source": "https://thehackernews.com/2026/06/new-dirtyclone-linux-kernel-flaw-lets.html", "content": "DirtyClone is a new Linux kernel privilege escalation in the DirtyFrag family.&amp;nbsp;JFrog Security Research published a working exploit walkthrough&amp;nbsp;for the flaw on June 25, the first public demonstration for this variant.\n\nTracked as&amp;nbsp;CVE-2026-43503&amp;nbsp;(CVSS 8.8), it lets a local user corrupt file-backed memory through a cloned network packet and gain root. The patch landed in", "creation_timestamp": "2026-06-27T01:00:39.253334Z"}</description>
      <content:encoded>{"uuid": "92807ffb-99a0-4d42-8024-fd1277790d37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43503", "type": "seen", "source": "https://thehackernews.com/2026/06/new-dirtyclone-linux-kernel-flaw-lets.html", "content": "DirtyClone is a new Linux kernel privilege escalation in the DirtyFrag family.&amp;nbsp;JFrog Security Research published a working exploit walkthrough&amp;nbsp;for the flaw on June 25, the first public demonstration for this variant.\n\nTracked as&amp;nbsp;CVE-2026-43503&amp;nbsp;(CVSS 8.8), it lets a local user corrupt file-backed memory through a cloned network packet and gain root. The patch landed in", "creation_timestamp": "2026-06-27T01:00:39.253334Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/92807ffb-99a0-4d42-8024-fd1277790d37/export</guid>
      <pubDate>Sat, 27 Jun 2026 01:00:39 +0000</pubDate>
    </item>
    <item>
      <title>9b28825b-f62f-41ad-a2e5-7555edaa2bd8</title>
      <link>https://vulnerability.circl.lu/sighting/9b28825b-f62f-41ad-a2e5-7555edaa2bd8/export</link>
      <description>{"uuid": "9b28825b-f62f-41ad-a2e5-7555edaa2bd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43503", "type": "seen", "source": "https://threatintel.cc/2026/06/26/new-dirtyclone-linux-vulnerability-allows.html", "content": "New DirtyClone Linux Vulnerability Allows Attackers to Gain Root Access Via Cloned Packets\n\nThe DirtyClone vulnerability (CVE-2026-43503) is a high-severity Linux kernel flaw that allows unprivileged users to gain root access by manipulating cloned network packets within the XFRM/IPsec subsystem. Attackers exploit the improper handling of the SKBFL_SHARED_FRAG flag to modify cached system files without leaving detectable logs or audit trails.", "creation_timestamp": "2026-06-27T01:00:39.658336Z"}</description>
      <content:encoded>{"uuid": "9b28825b-f62f-41ad-a2e5-7555edaa2bd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43503", "type": "seen", "source": "https://threatintel.cc/2026/06/26/new-dirtyclone-linux-vulnerability-allows.html", "content": "New DirtyClone Linux Vulnerability Allows Attackers to Gain Root Access Via Cloned Packets\n\nThe DirtyClone vulnerability (CVE-2026-43503) is a high-severity Linux kernel flaw that allows unprivileged users to gain root access by manipulating cloned network packets within the XFRM/IPsec subsystem. Attackers exploit the improper handling of the SKBFL_SHARED_FRAG flag to modify cached system files without leaving detectable logs or audit trails.", "creation_timestamp": "2026-06-27T01:00:39.658336Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9b28825b-f62f-41ad-a2e5-7555edaa2bd8/export</guid>
      <pubDate>Sat, 27 Jun 2026 01:00:39 +0000</pubDate>
    </item>
    <item>
      <title>0f8f700f-f6b4-488d-9a97-da9ed2a8d4bf</title>
      <link>https://vulnerability.circl.lu/sighting/0f8f700f-f6b4-488d-9a97-da9ed2a8d4bf/export</link>
      <description>{"uuid": "0f8f700f-f6b4-488d-9a97-da9ed2a8d4bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43503", "type": "seen", "source": "https://bsky.app/profile/tugate.ch/post/3mpauwb22rf26", "content": "Nova vulnerabilidade DirtyClone no Linux permite controlo total do sistema. A falha cr\u00edtica, conhecida como CVE-2026-43503, permite a um utilizador local com poucos privil\u00e9gios corromper a mem\u00f3ria suportada por ficheiros atrav\u00e9s de um pacote de rede clonado, obtendo acesso de administrador. \ud83d\udea8 \n\n#con", "creation_timestamp": "2026-06-27T06:56:12.453641Z"}</description>
      <content:encoded>{"uuid": "0f8f700f-f6b4-488d-9a97-da9ed2a8d4bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43503", "type": "seen", "source": "https://bsky.app/profile/tugate.ch/post/3mpauwb22rf26", "content": "Nova vulnerabilidade DirtyClone no Linux permite controlo total do sistema. A falha cr\u00edtica, conhecida como CVE-2026-43503, permite a um utilizador local com poucos privil\u00e9gios corromper a mem\u00f3ria suportada por ficheiros atrav\u00e9s de um pacote de rede clonado, obtendo acesso de administrador. \ud83d\udea8 \n\n#con", "creation_timestamp": "2026-06-27T06:56:12.453641Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0f8f700f-f6b4-488d-9a97-da9ed2a8d4bf/export</guid>
      <pubDate>Sat, 27 Jun 2026 06:56:12 +0000</pubDate>
    </item>
    <item>
      <title>21c11f63-3d16-4ba2-bb69-230989421b01</title>
      <link>https://vulnerability.circl.lu/sighting/21c11f63-3d16-4ba2-bb69-230989421b01/export</link>
      <description>{"uuid": "21c11f63-3d16-4ba2-bb69-230989421b01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43503", "type": "seen", "source": "https://bsky.app/profile/guardian360.bsky.social/post/3mpaxetcow62f", "content": "Tracked as CVE-2026-43503 (CVSS 8.8), it lets a local user corrupt file-backed memory through a cloned network packet and gain root. The patch landed in mainline on May 21; if your kernel does not have it, update now. thehackernews.com/2026/06/new-...", "creation_timestamp": "2026-06-27T07:40:09.278716Z"}</description>
      <content:encoded>{"uuid": "21c11f63-3d16-4ba2-bb69-230989421b01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43503", "type": "seen", "source": "https://bsky.app/profile/guardian360.bsky.social/post/3mpaxetcow62f", "content": "Tracked as CVE-2026-43503 (CVSS 8.8), it lets a local user corrupt file-backed memory through a cloned network packet and gain root. The patch landed in mainline on May 21; if your kernel does not have it, update now. thehackernews.com/2026/06/new-...", "creation_timestamp": "2026-06-27T07:40:09.278716Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/21c11f63-3d16-4ba2-bb69-230989421b01/export</guid>
      <pubDate>Sat, 27 Jun 2026 07:40:09 +0000</pubDate>
    </item>
    <item>
      <title>28ea9e4a-cac3-4066-adc5-eae2a5e12b00</title>
      <link>https://vulnerability.circl.lu/sighting/28ea9e4a-cac3-4066-adc5-eae2a5e12b00/export</link>
      <description>{"uuid": "28ea9e4a-cac3-4066-adc5-eae2a5e12b00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43503", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mpbb4wkx4j2j", "content": "A new Linux kernel vulnerability, tracked as CVE-2026-43503 (CVSS 8.8), allows local users to gain root access via cloned network packets. Discovered by JFrog Security Research, the flaw enables memory corruption through a cloned packet, affecting systems like Debian, Ubuntu, and Fedora.", "creation_timestamp": "2026-06-27T10:34:41.625674Z"}</description>
      <content:encoded>{"uuid": "28ea9e4a-cac3-4066-adc5-eae2a5e12b00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43503", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mpbb4wkx4j2j", "content": "A new Linux kernel vulnerability, tracked as CVE-2026-43503 (CVSS 8.8), allows local users to gain root access via cloned network packets. Discovered by JFrog Security Research, the flaw enables memory corruption through a cloned packet, affecting systems like Debian, Ubuntu, and Fedora.", "creation_timestamp": "2026-06-27T10:34:41.625674Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/28ea9e4a-cac3-4066-adc5-eae2a5e12b00/export</guid>
      <pubDate>Sat, 27 Jun 2026 10:34:41 +0000</pubDate>
    </item>
  </channel>
</rss>
