DirtyClone - Vulnerability

Threat entity extracted from intelligence sources

Frequency
5
occurrences
First Seen
June 26, 2026
Last Seen
June 27, 2026

DirtyClone is a vulnerability tracked by ThreatCluster, appearing in 1 threat cluster built from 5 intelligence report mentions.

DirtyClone is a vulnerability tracked across 1 threat cluster and 5 intelligence report mentions on ThreatCluster. First observed June 26, 2026; most recent activity June 27, 2026.

Related Threat Clusters

Recent Intelligence Reports

  • DirtyClone: Fourth Linux Kernel Flaw in Six Weeks Escalates to Root — Securityaffairs.Co · June 27, 2026
  • 2 Linux kernel flaw PoCs published, enabling local privilege escalation — Feeds.Feedburner · June 26, 2026
  • New DirtyClone Linux Vulnerability Allows Attackers to Gain Root Access Via Cloned Packets — Cybersecuritynews · June 26, 2026
  • DirtyClone vulnerability allows local root escalation via Linux kernel packet cloning — Feeds.4Sysops · June 26, 2026
  • New DirtyClone Linux Kernel Flaw Lets Local Users Gain Root via Cloned Packets — Thehackernews · June 26, 2026

Frequently asked questions

What is DirtyClone?

DirtyClone is a vulnerability tracked by ThreatCluster, appearing in 1 threat cluster built from 5 intelligence report mentions.

Is DirtyClone still active?

The most recent intelligence report mentioning DirtyClone on ThreatCluster is dated June 27, 2026. Activity was first observed June 26, 2026, giving a tracked span from then to June 27, 2026.

What is DirtyClone associated with?

Across ThreatCluster reporting, DirtyClone most frequently co-occurs with Zero-day Exploit, CVE-2026-43503, CVE-2026-46331, CWE-269 - Improper Privilege Management, Cwe-787 - Out-of-bounds Write, among 9 tracked related entities.

What are the latest developments involving DirtyClone?

The most significant recent cluster is “New DirtyClone Vulnerability in Linux Kernel Enables Local Privilege Escalation” (16 articles · Updated June 26, 2026). DirtyClone appears across 1 threat cluster in total, listed above with sources.

How much reporting does ThreatCluster have on DirtyClone?

DirtyClone appears in 5 intelligence report mentions across 1 deduplicated threat cluster, aggregated from 17,000+ monitored sources.

CVSS v3.1 Breakdown