New Linux pedit COW Exploit Enables Root Access by Poisoning Cached Binaries
A critical Linux kernel vulnerability dubbed DirtyClone is circulating, enabling local users to escalate privileges to root access.
Velocity
How fast coverage is spreading — measured hourly from article rate × source diversity. How this works →
The brief
A new exploit targeting the Linux kernel, identified as DirtyClone, has been identified. The vulnerability utilizes a pedit COW (Copy-On-Write) mechanism to poison cached binaries, potentially allowing local users to gain root system access.
Coverage from outlets including The Hacker News, Security Affairs, SC Media, and Linuxiac highlights the nature of the flaw, noting that it allows privilege escalation via cloned packets. Reports state that two proof-of-concept (PoC) exploits have been published, with some sources mentioning the potential for the activity to leave no trace on a disk.
Future developments will depend on the release of patches or official guidance for system administrators. Coverage does not yet specify the scope of affected Linux distributions or the timeline for a security resolution.
Synthesized by PULSE from the headlines below under a strict no-invention contract. ✓ fact-checked: all claims supported by sources Updated 137d ago.
Quick answers
What is the DirtyClone vulnerability?
It is a Linux kernel flaw that allows local users to achieve root privilege escalation through the poisoning of cached binaries using cloned packets.
What mechanism does the exploit use?
The exploit involves a pedit COW (Copy-On-Write) method.
Has proof-of-concept code been released?
Yes, coverage from SC Media indicates that two proof-of-concept exploits have been published.
Coverage (9)
- New Critical Linux Vulnerability Enables Root Privilege Escalation LinkedIn · 140d ago
- DirtyClone: A Linux Privilege Escalation That Leaves No Trace on Disk Security Affairs · 140d ago
- New Linux pedit COW Exploit Allows Attackers to Gain System Root Access CyberSecurityNews · 140d ago
- New DirtyClone Linux Kernel Flaw Lets Local Users Gain Root via Cloned Packets The Hacker News · 140d ago
- Linux Gets Dirty Again: DirtyClone Kernel Flaw Can Lead to Local Root Access Linuxiac · 140d ago
- 2 Linux kernel flaw PoCs published, enabling local privilege escalation | news SC Media · 140d ago
- New DirtyClone Linux Vulnerability Allows Attackers to Gain Root Access Via Cloned Packets CyberSecurityNews · 140d ago
- ssh-keysign-pwn Korben · 140d ago
- New Linux pedit COW Exploit Enables Root Access by Poisoning Cached Binaries The Hacker News · 140d ago
Topics
Related trends
OpenAI launches security products, tells orgs they’re doomed if they don’t use them
OpenAI launches Daybreak Red Team and Defense Factory security tools while warning organizations they face doom without them.
FBI says US has seized $1.2 billion worth of cryptocurrency stolen from Binance
Federal authorities seize over $1.2 billion in cryptocurrency following a massive $6.3 billion hack linked to North Korea.
Maersk confirms data breach as WhiteArmor ransomware demands $5 million
Maersk confirms data breach as WhiteArmor ransomware gang demands $5 million ransom, marking latest cyber hit on global shipping.
Lego marketplace BrickLink offline after 'unusual activity' detected
Lego's BrickLink marketplace remains offline for a fifth day after the company detected unusual activity, disrupting sellers and delaying a major designer program announcement.
If hackers can take over a supermarket fridge, what else is at risk?
French supermarket refrigerators and freezers were hacked, prompting US and European officials to warn that connected appliances are a new front in state-linked cyberattacks.
eMudhra Revokes 8 More CAs It Previously Declared Unaffected by Key Compromise
eMudhra revokes eight additional certificate authorities previously declared unaffected following a major security failure.