SecurityWeek

‘DirtyClone’ Linux Kernel Vulnerability Leads to Root Access

DirtyClone, tracked as CVE-2026-43503, is a Linux kernel vulnerability that allows any local user to gain root privileges.
Tech Times

Linux Kernel Root Exploit Published: DirtyClone Attack Leaves No Trace

Linux kernel privilege escalation exploit DirtyClone (CVE-2026-43503) is publicly documented: JFrog published a working attack walkthrough Thursday showing how any local user can gain root on ...

CVSS 8.8：Linux 漏洞 DirtyClone 披露，可提权至 root 最高权限

IT之家 6 月 27 日消息，科技媒体 Linuxiac 昨日（6 月 26 日）发布博文，报道称 JFrog 披露 Linux 内核本地提权漏洞 DirtyClone，追踪编号 CVE-2026-43503，CVSS 评分 ...
Opinion

High-severity vulnerability in Linux caused by a single faulty character

Researchers have analyzed a high-severity vulnerability in Linux that’s able to escalate untrusted users to root by exploiting a bug you don’t often see: a single errant character inside the kernel.
电子工程专辑

Linux权限的黑暗面：为什么root滥用会导致灾难？

干货福利，第一时间送达！ 最近有小伙伴说没有收到当天的文章推送，这是因为微信更改了推送机制，导致没有星标公众号的小伙伴刷不到当天推送的文章，无法接收到一些比较实用的知识和资讯。所以建议大家加个星标⭐️，以后就能第一时间收到推送了。
腾讯网

Linux内核爆出严重漏洞！影响跨度长达19年：旧版系统皆受波及

漏洞虽然主要针对Linux内核6.14及以上版本，但由于近期漏洞修补的“向前回溯（Backport）”影响，许多旧版本同样面临风险，受波及系统最远可追溯至2007年，跨度长达19年。 不过并非所有发行版均受影响，Ubuntu 26.04、Fedora 40+、CentOS Stream 10及openSUSE Leap 16因默认安全策略能有效阻挡该攻击手法，目前不受CIFSwitch威胁。

Linux 内核高危漏洞披露：一个感叹号，可提权至最高权限

IT之家 6 月 10 日消息，科技媒体 Ars Technica 昨日（6 月 9 日）发布博文，报道称 Linux 内核曝光高危提权漏洞 CVE-2026-53111，只因为 1 个错误的感叹号，就能触发提权漏洞，最高提权至系统最高 root 权限。 IT之家援引博文介绍，CVE-2026-53111 漏洞存在于 nf_tables 子系统中，源于内核中的 1 个错误字符，表面只是 1 个感叹 ...
Forbes

Critical New Linux Zero-Day Leaked—What Admins Need To Do Now

This voice experience is generated by AI. Learn more. This voice experience is generated by AI. Learn more. Dirty Frag Linux zero-day confirmed. Updated May 10: This article regarding the critical ...
Bleeping Computer

Linux SUDO Bug Lets You Run Commands as Root, Most Installs Unaffected

A vulnerability in the Linux sudo command has been discovered that could allow unprivileged users to execute commands as root. Thankfully, this vulnerability only works in non-standard configurations ...