Find notable cyber news and cases, enriched with sources, timelines, and signals.

Linux kernel maintainers security patch release for CVE-2026-43503

Security Patch Release
First reported
Last updated
Happening score
H score 34
1 unique sources, 1 articles

Summary

Hide ▲

Linux kernel merged and shipped the DirtyClone security fix for CVE-2026-43503, closing a CVSS 8.8 local privilege-escalation path that could let affected systems be rooted.

Related Happenings

Microsoft security patch release for CVE-2026-41091 and CVE-2026-45498

Security Patch Release
H score44 First: 21.05.2026 10:49 Last: 21.05.2026 10:49 Sources 1

About this happening: Microsoft rolled out security updates for Defender and related malware protection components to address two zero-days: CVE-2026-41091 and CVE-2026-45498. The fixes cover affected...

Latest development: 21.05.2026 12:52

Microsoft released patches for Microsoft Defender Antimalware Platform version 4.18.26040.7 to address CVE-2026-41091, a link-following privilege-escalation flaw that can let an authorized attacker elevate privileges locally to System, and CVE-2026-45498, a denial-of-service flaw. Microsoft said both vulnerabilities were publicly disclosed and exploited in the wild as zero-days. CISA added both flaws to its Known Exploited Vulnerabilities (KEV) list and urged federal agencies to patch them by June 3.

Linux distros patch release for Fragnasia (CVE-2026-46300)

Security Patch Release
H score25 First: 14.05.2026 10:34 Last: 14.05.2026 10:34 Sources 1

About this happening: Linux distros are rolling out **patches** for **CVE-2026-46300**, a high-severity kernel flaw that can let unprivileged local attackers gain **root** on vulnerable Linux systems....

Linux kernel Dirty Frag patch release (CVE-2026-43284, CVE-2026-43500)

Security Patch Release
H score32 First: 11.05.2026 17:30 Last: 11.05.2026 17:30 Sources 1

About this happening: **Major Linux distributions** are rolling out fixes for **Dirty Frag**, the **Linux kernel** patch release that covers **CVE-2026-43284** and **CVE-2026-43500**. The update matter...

CISA KEV action for CVE-2026-31431 and FCEB remediation

Public Sector Action
H score37 First: 03.05.2026 09:26 Last: 03.05.2026 09:26 Sources 1

About this happening: CISA added **CVE-2026-31431** to its **KEV catalog**, putting **Federal Civilian Executive Branch (FCEB)** agencies on notice to remediate an actively exploited Linux privilege-es...

Linux kernel security update for Copy Fail (CVE-2026-31431)

Security Patch Release
H score39 First: 30.04.2026 16:54 Last: 30.04.2026 16:54 Sources 1

About this happening: **Linux kernel** maintainers have fixed **CVE-2026-31431** and are rolling out updates to close a **local privilege escalation** flaw that lets an unprivileged attacker gain **roo...

Timeline

  1. 26.06.2026 14:51 1 articles · 1h ago

    Hyunwoo Kim submits a broader frag-transfer patch for the Linux kernel

    Technical Analysis Update

    Hyunwoo Kim submits a broader multi-site patch covering several remaining frag-transfer helpers in the Linux kernel, extending the fix beyond the original DirtyFrag paths where the shared-frag bit could be lost.

    Show sources
  2. 26.06.2026 14:51 2 articles · 1h ago

    Linux kernel maintainers merge the DirtyClone fix into mainline

    Mitigation Patch Update

    Linux kernel maintainers merge the combined DirtyClone fix, closing additional frag-transfer helper paths where the shared-frag bit could be dropped and using commit 48f6a5356a33.

    Show sources
  3. 25.06.2026 03:00 1 articles · 1d ago

    JFrog Security Research publishes a DirtyClone exploit walkthrough

    Initial Disclosure

    JFrog Security Research publishes a working exploit walkthrough for DirtyClone on June 25, showing a public path to root through a cloned network packet and a local privilege-escalation flaw in the Linux kernel.

    Show sources