Linux Kernel Root Exploit Published: DirtyClone Attack Leaves No Trace

▤ Summary

JFrog published a detailed walkthrough for the DirtyClone Linux kernel exploit, showing how an unpatched system can be escalated to root without leaving traces in kernel logs or on disk. The issue affects systems that have not fully applied the DirtyFrag patch series, including many cloud servers, Kubernetes clusters, and CI runners. Administrators need to update kernels or apply backported fixes, and interim mitigations such as restricting user namespaces can reduce exposure. The article also warns that DirtyClone is part of a broader family of Linux kernel flaws, so patching the full series matters more than fixing a single CVE.

▦ Linked Companies

JFrog Ltd

$100M to $250M