Reported by 1 outlet
Exploit Code Published for Two Linux Kernel Privilege Escalation Flaws — pedit-cow and DirtyClone
Why this score
- Breadth
- 0.50 / 2.0 · 1 source
- Authority
- 1.00 / 2.0 · best outlet weight
- Severity
- 3.50 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.00 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Timeline
-
original reporting
Exploit Code Published for Two Linux Kernel Privilege Escalation Flaws — pedit-cow and DirtyClone
research.jfrog.com · 108d ago · June 28th, 2026
Public proof-of-concept exploits have been released for two Linux kernel local privilege escalation vulnerabilities, enabling unprivileged local users to gain root access across multiple distributions.
-
CVE-2026-46331 (pedit-cow): An out-of-bounds write in the kernel's traffic control packet editing subsystem (act_pedit) causes corruption of shared page-cache memory instead of writing to a private copy. Affects RHEL 8/9/10, Debian 11/12/13, and Ubuntu 18.04–26.04. A working exploit appeared within 24 hours of CVE assignment.
-
CVE-2026-43503 (DirtyClone): A high-severity (CVSS 8.8) flaw in skbuff shared-fragment handling lets local users gain root by corrupting file-backed memory through cloned network packets. Affects any distribution running a kernel without the complete DirtyFrag patch chain.
Mitigations: Blacklist the act_pedit module if tc pedit rules are not used, or disable unprivileged user namespaces. Ubuntu 24.04+ has partial AppArmor namespace restrictions but the underlying kernel vulnerability remains.
-