Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
5 IOCs
DirtyClone Linux Kernel LPE Flaw Lets Local Users Gain Root Access
Excerpt
A newly disclosed high-severity vulnerability in the Linux kernel, dubbed DirtyClone (CVE-2026-43503), allows any unprivileged local user to silently gain root access by corrupting file-backed memory via cloned network packets, leaving no kernel logs or audit traces. DirtyClone is the latest identified variant within the DirtyFrag vulnerability family, a class of Linux kernel memory corruption bugs rooted in how socket buffers (skbs) reference shared page-cache memory, which…
Read the original report →Indicators of Compromise
Open the mindmap →5 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-46300 | High | Score 67/100 | First seen |
| CVE | CVE-2026-43503 | Medium | Score 59/100 | First seen |
| CVE | CVE-2026-31431 | High | Score 79/100 | First seen |
| CVE | CVE-2026-43284 | High | Score 66/100 | First seen |
| CVE | CVE-2026-43500 | High | Score 63/100 | First seen |
IOC Relationship Graph
Building graph…