Cyber Security - "New DirtyClone Linux Vulnerability Allows Attackers to Gain Root Access Via Cloned Packets"

Rocky Linux Help & Support
1

Dear Rockers

Anyone dealt with this vulnerability?:scream:

2

It only came out 22 hours ago lol why not give people time first to implement a fix?

3

Of course just checking :grinning_face_with_smiling_eyes:

Thanks :folded_hands:

4

As far as I can tell, this requires the attacker to be a local user?

5

The summary posted above says “allows unprivileged local users” so it appears that you have to be a local user.

6

If you look at the end of that Article, it tells you how to fix the issue, by patching. They withheld the publication of the Problem, but informed the Distro’s so they’d have enough time to create patches. So if you apply those you should be fine. I assume this was one of those Vulnerabilities which this AI found. It was overall in the news.

7

Looking at Red Hat’s errata (RHSA-2026:19568),
it appears that CVE-2026-43503 was patched together with CVE-2026-46300 previously.

However, this doesn’t seem to be reflected in Rocky Linux’s corresponding errata
RLSA-2026:19568

Is this simply an oversight/omission on Rocky’s side, or is there another explanation?