Linux Kernel CVE-2026-43503 ("DirtyClone") PoC released by JFrog

JFrog Security announced on X that its researchers have developed a proof-of-concept exploit for Linux Kernel CVE-2026-43503. The company described the vulnerability as a newly discovered DirtyFrag variant that it has named DirtyClone. The post states that the exploit achieves privilege escalation. JFrog Security said the vulnerability was patched and merged into mainline Linux on May 21 in version 7.1-rc5 under commit 9e171fc1d7d7. The account urged users to ensure systems are up to date. The announcement included a link to a technical writeup on the JFrog research site. The post did not provide additional technical details or confirm independent verification of the exploit's effectiveness.