# New Linux pedit COW Exploit Enables Root Access by Poisoning Cached Binaries

> **Open Intelligence Dossier** · First detected: 2026-06-27 07:07 UTC · Category: Technology

## Executive Summary
A critical Linux kernel vulnerability dubbed DirtyClone is circulating, enabling local users to escalate privileges to root access.

## Intelligence Brief
A new exploit targeting the Linux kernel, identified as DirtyClone, has been identified. The vulnerability utilizes a pedit COW (Copy-On-Write) mechanism to poison cached binaries, potentially allowing local users to gain root system access.


Coverage from outlets including The Hacker News, Security Affairs, SC Media, and Linuxiac highlights the nature of the flaw, noting that it allows privilege escalation via cloned packets. Reports state that two proof-of-concept (PoC) exploits have been published, with some sources mentioning the potential for the activity to leave no trace on a disk.


Future developments will depend on the release of patches or official guidance for system administrators. Coverage does not yet specify the scope of affected Linux distributions or the timeline for a security resolution.

## Multi-Source Evidence Table
| Source Outlet | Headline | Verification URL |
|---|---|---|
| LinkedIn | New Critical Linux Vulnerability Enables Root Privilege Escalation | [Source Link](https://news.google.com/rss/articles/CBMilwFBVV95cUxNclBlUFlZYUQ5X1lWRmxwZElqU3F5NDNQV1UwVkhhR1JzWUdEY3RTeTdLZXRnUnY3UFY3M3ZiSTF1RVctclBVZ1NKeF9ITmxZcmlVN2xRS1hzd3FvNmRWSjRlaEhmNEptRkJuSkZySUs3eEtTc2loYXpGaTNUTXRjd0tUM0RRb1FBVVhXRjBmY3I4cm1VZi1N?oc=5) |
| Security Affairs | DirtyClone: A Linux Privilege Escalation That Leaves No Trace on Disk | [Source Link](https://news.google.com/rss/articles/CBMivAFBVV95cUxOdDNtYjFHSl9tbTQzNXo3bWFTX093dHdxUkxKM0h2SmhReTZ4N2dMOW1vVF9UU2F2dFk5cDdSaXQ3dEJCV1VDZ0xhR0o1TnROUnpqRC1fU2Jld0QxWkdxc1l0YXIwVXdTQWZwanN5QmxsWENtRTRYMlZIdURxd3ZWaWhlV0FJU25tVTNPNzVvUHZ4RWFxbl9vSmszQ0drZXc3aVJ5XzhXMFdRUW5oZmV3M3Roc3JRNDkwemV6dw?oc=5) |
| CyberSecurityNews | New Linux pedit COW Exploit Allows Attackers to Gain System Root Access | [Source Link](https://news.google.com/rss/articles/CBMiZEFVX3lxTE0td0dYWC1uRDQ5TUstbGVhOWNmUTU0ZG5UaVJxa2MtdWdJZ2JqZnRHLTA2UmdlMjdTd2gybW44Q0RfSWw4d1F1Y25kdE5IVWtnNklhdmJBZmVNNjJZS0R1YU5iUGHSAWpBVV95cUxPc3RCaEFscTBEWDFRTHJJX1B2Yl9KaDBwWjBqUUZjc09acEFFQ0R3b0RmeF9ZaEYyaWR3N0VoOGxoZ0FqazR4SDZMSlFfSlJxM2ZLdW1rUEQxTjBUNmRnSjhNSkVvRXBGa0Rn?oc=5) |
| The Hacker News | New DirtyClone Linux Kernel Flaw Lets Local Users Gain Root via Cloned Packets | [Source Link](https://news.google.com/rss/articles/CBMiggFBVV95cUxOczZIRUd3MldxWUlBSE1ZQ1BDRUhlOTJfUFdTOEh0MjNEYVRCSHJrLUI5U2Y4ZmV3TXRqZDBwR1VVcFplWmZ3S2FNZWFuZUQzLThEdVFLTndEMlg3d1RMRVlNZXdsVnpycU5BSFQ1ejYwTF9sR2dLNFd3US00WTVXS0hR?oc=5) |
| Linuxiac | Linux Gets Dirty Again: DirtyClone Kernel Flaw Can Lead to Local Root Access | [Source Link](https://news.google.com/rss/articles/CBMingFBVV95cUxPUV9CdTA0ZWpOaU5RX0FXRElwRElRTWp0QjFtb3M4d19BaFFpdGJreU1EZW1RSUgxdWp6RDN6YmJVNk1NTG5DUExvbndndV9UanAzNVRnM2p4c0hDcmZhek5kSUdUeE15U3Z0NkQySzJSWTNORHRkOUFQZk1TRlpDMnhBREVOSlgtTUw4RnlhVU9iNGlBMDZ6QnZLMkpaQQ?oc=5) |
| SC Media | 2 Linux kernel flaw PoCs published, enabling local privilege escalation - news - SC Media | [Source Link](https://news.google.com/rss/articles/CBMioAFBVV95cUxPdjlrYnpQMUs2SGlHTUV3LVlOQjROSXFtM0tKVFkyU0JYNUpiS2RyOHYxSnM0anpaV1JUcjNUUFVNRjBfd2Y1WkRadkp0N29raWprWnRDV0FkWGhRSDFyR0VNeGVXajFhcGkweHpKeU5WQTE4anZoLXpseTBGU19OSWN5WWVYa0N2STdWT3FLOW5BUEUxMG9SRWhRdlNBOUVF?oc=5) |
| CyberSecurityNews | New DirtyClone Linux Vulnerability Allows Attackers to Gain Root Access Via Cloned Packets | [Source Link](https://news.google.com/rss/articles/CBMibkFVX3lxTE1DUDMwZkNacVh1bWVUakE5U0h6VlJZLXRCTV8tUkhHWE51WXh2U05yNmwxU1JKZk50ZFBCQjZKaENCRDRTbGhpZHphMTBldmJETVp5YnM0SWRPSjR4Z1VyZDhrNUwzeTQ5ZzdBZkN30gFzQVVfeXFMTmZYTlZmc1BxdS16YUg4VXpobTl0RHdFUUxnNEVBMTczNGFpZlVINzdyajg0QUk3TWh0QUJpanZ4OWFFU2NHX08zYUUzN25BQ3Y0TUp1U3l0YTl0MGNJZGo3NGdTY3FHanJwd1FGSmN2ZGhQQQ?oc=5) |
| Korben | ssh-keysign-pwn - The Linux kernel flaw hiding for 9 years | [Source Link](https://news.google.com/rss/articles/CBMieEFVX3lxTE91bi1Ia3lXcnJCQndaSUxpNkJ2bVlfTHZsSHIwQ25oaDZQM2R3cFBEUkFtUXBJYlZzS3JuaUlnRlVvYVBHeFFkaHk0cTU4dVB1SlZ2aFRERXlpaHJkbE14YUttVloxN0xMV2xoMWU3a1JMUjBUMkthWQ?oc=5) |
| The Hacker News | New Linux pedit COW Exploit Enables Root Access by Poisoning Cached Binaries | [Source Link](https://news.google.com/rss/articles/CBMif0FVX3lxTE9OUEtDRmFFUFFmRk5qUGtuUklzQ0xkYTVWWXhadEY5YUxrUDN0c1B3bWptTzRYSi1uZGNPT2dGTFItVUFaS1I0TUZPSWZqTFVwRnV1cXpxZ3pkTHVDRmg0RmxTWldjdmUyVG5aSWlDUEt5TUtTZzB2aEpiWWhHSDg?oc=5) |

---
*Canonical Source: https://pulse.byoviral.com/trend/2026-06-27/new-linux-pedit-cow-exploit-enables-root-access-by-poisoning-cached-binaries*