# New "Bad Epoll" Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits Android

> **Open Intelligence Dossier** · First detected: 2026-07-04 03:07 UTC · Category: Technology

## Executive Summary
A critical Linux kernel vulnerability, identified as DirtyClone or Bad Epoll, is enabling unauthorized root-level access across servers and Android devices.

## Intelligence Brief
A new kernel race condition, tracked as CVE-2026-43503 and referred to as DirtyClone, Bad Epoll, or Fragnesia, allows unprivileged users to gain root access. The vulnerability affects both Linux distributions and Android devices.


Coverage from CyberSecurityNews, Tech Times, Rescana, SQ Magazine, Linuxiac, SecurityWeek, and The Hacker News highlights the severity of the flaw, noting that it bypassed AI auditing tools. Canonical has reportedly confirmed that fixes for Ubuntu are currently available.


Future developments will focus on the deployment of patches across other affected Linux distributions and Android ecosystem stakeholders. Coverage does not yet specify the full list of impacted software versions.

## Multi-Source Evidence Table
| Source Outlet | Headline | Verification URL |
|---|---|---|
| CyberSecurityNews | New "Bad Epoll" 0-Day Vulnerability Allows Root Access on Linux Servers and Android Devices | [Source Link](https://news.google.com/rss/articles/CBMibEFVX3lxTE94YVZqbS0xV2o3d2ZJNnhZM2lPWUxhNTVpUHBfSTdSekFfbldkY1VoZnhPcVVTZzF3OS1aQjNteDFaTnpaMjdqTzhFRHQ5aWl4UzBpN2Exbko3ZkU4YTdpdmpJT3VfX1FmRUVaedIBckFVX3lxTE9lSjdUa2VVNjJMR1JrbExrMEJtX043aFVxanQ4Wlh3Zm44NWRIa0lQbXVKeExBVDR1NXlFMVl5VHFtNFgzejlkbFhXMjVlX2FweV9Bd0JzcDJYaXRqUWtZNWZjRXVvX3pYa1NGbm1pZWxkdw?oc=5) |
| Korben | Fragnesia - A new Linux kernel flaw in the Dirty Frag family | [Source Link](https://news.google.com/rss/articles/CBMigwFBVV95cUxPZUg5aEhyYjZKdDFrckZnSlpweW91Z01NSzM5bm9FWFdYRm5pMVhoWHZfWjM5Z0lfczBiQ09VRlFLQUFDWXlSMU5PRENyb3hCUHoySjlQNDdRdlRYenRDU3QyS0VvemRPZ0tiSWNZQ2dPa3NJT053eHpyR1JDNm5DcWtvVQ?oc=5) |
| Tech Times | Bad Epoll: Kernel Race Bug Beats AI Auditing, Hits 99% Root Exploit Rate | [Source Link](https://news.google.com/rss/articles/CBMiwgFBVV95cUxOLURRVmlhdXMyT1R5Z0RiRWJNZTZSazRwZk5zallvUFBtS2hOd0pLQktzbFdyNllOTi1xWWNhelBoS1JwTUJjY1dET3M3cGVHZ3AwbjU3Q1o2ZDFqdmZxd05QazJYcUxFRW96MkI4MmFRMHBZRTdvNjlxNU4xempvS2FrTUV6Q3dDY0o4NXpxRVozTGpJR0FiUUZzZ0hscDFLRzVXMVptdk9wNXdnUE9mNGtuZ3FYZmpZdXFqbUFhbTd6UQ?oc=5) |
| Rescana | DirtyClone (CVE-2026-43503): Critical Linux Kernel Vulnerability Enables Local Privilege Escalation to Root on Major Distributions | [Source Link](https://news.google.com/rss/articles/CBMi4wFBVV95cUxQMzZPanFCbnBnVjlickZzTmVxNE5FM1c1NjVRQlNRRWs3dGx3THRDdVpWSWNYOGdoUHJHUWNsbmx1Q2tpdEdOcFlEWGx2VWVkNkZPeDItQ3hpV1VLNGEzMjdBSzNfTDAwcFZOMVhjeXRyV0h4bWZERHp3d3ZONTJJTE51NVQtUTkxNENNSERqcEluNDNwaUhkcE5kNm9BeXlEYjV3anRvd3JiVFE2VW5zRnRlVTlONzIxVjcxSTZVMlNJWnR1ZnVyekE0bl9JRTJVaV9nZzNuY25Ddm9hMlZrR3E1NA?oc=5) |
| SQ Magazine | Critical Linux pedit COW Bug Gives Hackers Instant Root Access | [Source Link](https://news.google.com/rss/articles/CBMibkFVX3lxTE1WQ1p0S2FsZXM5Z1NHS0Qtc3lFa2VOLTdFdTI4d3h1Vk1DMGVCa0NnV2VSMjZrM2xaT2lvNGtELUxHaURjVENnb0JJaTdqT3haekl4OHpPbllRcFBWS1Y2VDZLV1ljZ0FOWTdSNkhR?oc=5) |
| Linuxiac | Canonical Confirms Ubuntu Fixes for DirtyClone Linux Kernel Flaw | [Source Link](https://news.google.com/rss/articles/CBMijwFBVV95cUxOOG84WFJQTDVfbEZMZmNxa0xUcUdYdEVCRzJ0NDRnaFpCdGQxV0EyMWloaVRrMWRnam14S0VOUUJ5SnBYdXNzN3lJVDBkNUo4RHcyRTZPdmt2NjZhZkdMM0t6LTAzUmwtWFcwUjFSZ1RnZDdJVHJCaFo2TGl1dFl5VmhWcWxXNlV0ZmhSdGZxOA?oc=5) |
| SecurityWeek | ‘DirtyClone’ Linux Kernel Vulnerability Leads to Root Access | [Source Link](https://news.google.com/rss/articles/CBMikgFBVV95cUxQTlVYbHJaZm1GaVdPcHlZNXpYTUJzOEhRM0ppaS04QXMta1doMnRiRjJNdkRPU0N2UEhXajM5VXZGSU9VV3JXM19qQU02TjRCNXpSSVduWno0bjVaaDJXUVNWekl1dFRRSUUyUFFRbmJxcW9XM2NnRDZZSE5ZNkxySlFtSDBEYUExOWlsWm96N2wtd9IBlwFBVV95cUxPbnhhalBHMGgtd2hORV9rM3Y5LUFobElyZXhIQ2FVckFndlVFYXVSa3RuQlZhUjRtUFY3QzViellrdGZuNHZVM2FVbDVYOWNuRmNJYWwxT3FZSnN1OGJhaHEzdjkxNGhJcFJjbmpOcmdzMXQxQnBEN2s3VkZYZnRXRm5IUGc0ejVMTHF6VnJkTHg5eTFKSWZJ?oc=5) |
| The Hacker News | New "Bad Epoll" Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits Android | [Source Link](https://news.google.com/rss/articles/CBMigAFBVV95cUxOaTdYVTZOeHhwRm5YUVgxY2tCbWFFU0lnSHplRVNkSUVOQWpKaDdFTFBPeTRDdUVHZ0l6WENyWklmUUUyS3BpVTA2eEI5ckh6UEdkcUhOTnJVVjgyTFFBMVRhTk9tS2x4YjBSRk5xVloxTkxUM2dWdG8xYWJmQmtBQQ?oc=5) |

---
*Canonical Source: https://pulse.byoviral.com/trend/2026-07-04/new-bad-epoll-linux-kernel-flaw-lets-unprivileged-users-gain-root-hits-android*