A recently disclosed vulnerability (CVE-2026-43503), also known as DirtyClone, affects the Linux kernel and may allow a local unprivileged user to gain root privileges on vulnerable systems.
Severity level:
CVSS Score: 8.8/High.
Description:
CVE-2026-43503 (DirtyClone) is a high-severity Linux kernel privilege escalation vulnerability caused by improper handling of shared memory fragments in the networking subsystem. A local attacker can exploit the flaw to modify file-backed page-cache memory and alter the behavior of privileged executables, potentially gaining root privileges on the affected system. The attack occurs in memory without modifying files on disk, making detection more difficult.
Affected Versions:
- Major Linux distributions.
- Linux systems running kernel versions prior to vendor-provided fixes for CVE-2026-43503.
Impact:
Successful exploitation may allow attackers to escalate privileges from local user account to root.
Resolution:
Apply the latest security updates provided by the Linux distribution and upgrade the kernel.
Reference:
UIT Information Security