Dirty Pipe - Vulnerability

Threat entity extracted from intelligence sources

Frequency
16
occurrences
First Seen
April 29, 2026
Last Seen
July 7, 2026

Dirty Pipe is a vulnerability tracked by ThreatCluster, appearing in 2 threat clusters built from 16 intelligence report mentions.

Dirty Pipe is a vulnerability tracked across 2 threat clusters and 16 intelligence report mentions on ThreatCluster. First observed April 29, 2026; most recent activity July 7, 2026.

Related Threat Clusters

Recent Intelligence Reports

  • 16-year — Csoonline · July 7, 2026
  • Newly disclosed "Dirty Frag" vulnerability left Linux exposed for nearly a decade — Techspot · May 11, 2026
  • Dirty Frag is a new Linux bug putting your system at risk - and there's no easy fix yet — Zdnet · May 11, 2026
  • 'Dirty Frag' Exploit Poised to Blow Up on Enterprise Linux Distros — Darkreading · May 11, 2026
  • New ‘Dirty Frag’ exploit targets Linux kernel for root access — Csoonline · May 11, 2026
  • Dirty Frag: new local exploit elevates privileges in Linux — Foro3D · May 10, 2026
  • 'Dirty Frag' Linux zero-day exposes most distributions to LPE | news — Scworld · May 8, 2026
  • Warning: Dirty Frag, a new Linux Local Privilege Escalation vulnerability, was disclosed. Patch I... — Ccb.Belgium.Be · May 8, 2026

Frequently asked questions

What is Dirty Pipe?

Dirty Pipe is a vulnerability tracked by ThreatCluster, appearing in 2 threat clusters built from 16 intelligence report mentions.

Is Dirty Pipe still active?

The most recent intelligence report mentioning Dirty Pipe on ThreatCluster is dated July 7, 2026. Activity was first observed April 29, 2026, giving a tracked span from then to July 7, 2026.

What is Dirty Pipe associated with?

Across ThreatCluster reporting, Dirty Pipe most frequently co-occurs with DDoS, Malware, Privilege Escalation, Zero-day Exploit, Copy Fail Campaigns, among 12 tracked related entities.

What are the latest developments involving Dirty Pipe?

The most significant recent cluster is “Critical Januscape Vulnerability in Linux KVM Exposes Cloud Servers to Attacks” (26 articles · Updated July 7, 2026). Dirty Pipe appears across 2 threat clusters in total, listed above with sources.

How much reporting does ThreatCluster have on Dirty Pipe?

Dirty Pipe appears in 16 intelligence report mentions across 2 deduplicated threat clusters, aggregated from 17,000+ monitored sources.

CVSS v3.1 Breakdown