# New Linux pedit COW Exploit Enables Root Access by Poisoning Cached Binaries

> **Newsylist Open Intelligence Dossier** · First detected: 2026-06-27 05:36 UTC · Category: Technology · Sources: 7 · Current Velocity: 5.95

## Executive Summary
A new Linux kernel vulnerability, dubbed DirtyClone, allows local users to gain root access by poisoning cached binaries.

## Intelligence Brief
A new Linux kernel exploit known as pedit COW, or DirtyClone, enables local privilege escalation. This vulnerability allows attackers to gain root access through the use of cloned packets and the poisoning of cached binaries.


Coverage from The Hacker News, CyberSecurityNews, and SC Media emphasizes that proof-of-concept (PoC) code for two Linux kernel flaws has been published. Korben also reports on the 'ssh-keysign-pwn' aspect of these developments.


Future developments center on the availability of the published PoCs and the broader implications for local users capable of executing these exploits.

## Verified Facts & Key Claims
### What is the name of the Linux kernel flaw?
The vulnerability is referred to as DirtyClone or the pedit COW exploit.

### What is the primary impact of this exploit?
It enables local users to gain root access via cloned packets and the poisoning of cached binaries.

### Has proof-of-concept code been released?
According to SC Media, PoCs for two Linux kernel flaws have been published.

## Key People, Organizations & Locations
Linux, New Linux, COW Exploit Enables Root Access, Poisoning Cached Binaries, New DirtyClone Linux Kernel Flaw Lets Local Users Gain Root, Cloned Packets, New DirtyClone Linux Vulnerability Allows Attackers, Gain Root Access Via Cloned Packets

## Multi-Source Evidence Table
| Source Outlet | Headline | Published (UTC) | Verification URL |
|---|---|---|---|
| LinkedIn | New Critical Linux Vulnerability Enables Root Privilege Escalation | 2026-06-26 13:04 | [Source Link](https://news.google.com/rss/articles/CBMilwFBVV95cUxNclBlUFlZYUQ5X1lWRmxwZElqU3F5NDNQV1UwVkhhR1JzWUdEY3RTeTdLZXRnUnY3UFY3M3ZiSTF1RVctclBVZ1NKeF9ITmxZcmlVN2xRS1hzd3FvNmRWSjRlaEhmNEptRkJuSkZySUs3eEtTc2loYXpGaTNUTXRjd0tUM0RRb1FBVVhXRjBmY3I4cm1VZi1N?oc=5) |
| Security Affairs | DirtyClone: A Linux Privilege Escalation That Leaves No Trace on Disk | 2026-06-26 13:04 | [Source Link](https://news.google.com/rss/articles/CBMivAFBVV95cUxOdDNtYjFHSl9tbTQzNXo3bWFTX093dHdxUkxKM0h2SmhReTZ4N2dMOW1vVF9UU2F2dFk5cDdSaXQ3dEJCV1VDZ0xhR0o1TnROUnpqRC1fU2Jld0QxWkdxc1l0YXIwVXdTQWZwanN5QmxsWENtRTRYMlZIdURxd3ZWaWhlV0FJU25tVTNPNzVvUHZ4RWFxbl9vSmszQ0drZXc3aVJ5XzhXMFdRUW5oZmV3M3Roc3JRNDkwemV6dw?oc=5) |
| Linuxiac | Linux Gets Dirty Again: DirtyClone Kernel Flaw Can Lead to Local Root Access | 2026-06-26 13:04 | [Source Link](https://news.google.com/rss/articles/CBMingFBVV95cUxPUV9CdTA0ZWpOaU5RX0FXRElwRElRTWp0QjFtb3M4d19BaFFpdGJreU1EZW1RSUgxdWp6RDN6YmJVNk1NTG5DUExvbndndV9UanAzNVRnM2p4c0hDcmZhek5kSUdUeE15U3Z0NkQySzJSWTNORHRkOUFQZk1TRlpDMnhBREVOSlgtTUw4RnlhVU9iNGlBMDZ6QnZLMkpaQQ?oc=5) |
| CyberSecurityNews | New Linux pedit COW Exploit Allows Attackers to Gain System Root Access | 2026-06-26 13:04 | [Source Link](https://news.google.com/rss/articles/CBMiZEFVX3lxTE0td0dYWC1uRDQ5TUstbGVhOWNmUTU0ZG5UaVJxa2MtdWdJZ2JqZnRHLTA2UmdlMjdTd2gybW44Q0RfSWw4d1F1Y25kdE5IVWtnNklhdmJBZmVNNjJZS0R1YU5iUGHSAWpBVV95cUxPc3RCaEFscTBEWDFRTHJJX1B2Yl9KaDBwWjBqUUZjc09acEFFQ0R3b0RmeF9ZaEYyaWR3N0VoOGxoZ0FqazR4SDZMSlFfSlJxM2ZLdW1rUEQxTjBUNmRnSjhNSkVvRXBGa0Rn?oc=5) |
| SC Media | 2 Linux kernel flaw PoCs published, enabling local privilege escalation - news | 2026-06-26 13:04 | [Source Link](https://news.google.com/rss/articles/CBMioAFBVV95cUxPdjlrYnpQMUs2SGlHTUV3LVlOQjROSXFtM0tKVFkyU0JYNUpiS2RyOHYxSnM0anpaV1JUcjNUUFVNRjBfd2Y1WkRadkp0N29raWprWnRDV0FkWGhRSDFyR0VNeGVXajFhcGkweHpKeU5WQTE4anZoLXpseTBGU19OSWN5WWVYa0N2STdWT3FLOW5BUEUxMG9SRWhRdlNBOUVF?oc=5) |
| Korben | ssh-keysign-pwn | 2026-06-26 13:04 | [Source Link](https://news.google.com/rss/articles/CBMieEFVX3lxTE91bi1Ia3lXcnJCQndaSUxpNkJ2bVlfTHZsSHIwQ25oaDZQM2R3cFBEUkFtUXBJYlZzS3JuaUlnRlVvYVBHeFFkaHk0cTU4dVB1SlZ2aFRERXlpaHJkbE14YUttVloxN0xMV2xoMWU3a1JMUjBUMkthWQ?oc=5) |
| The Hacker News | New DirtyClone Linux Kernel Flaw Lets Local Users Gain Root via Cloned Packets | 2026-06-26 13:04 | [Source Link](https://news.google.com/rss/articles/CBMiggFBVV95cUxOczZIRUd3MldxWUlBSE1ZQ1BDRUhlOTJfUFdTOEh0MjNEYVRCSHJrLUI5U2Y4ZmV3TXRqZDBwR1VVcFplWmZ3S2FNZWFuZUQzLThEdVFLTndEMlg3d1RMRVlNZXdsVnpycU5BSFQ1ejYwTF9sR2dLNFd3US00WTVXS0hR?oc=5) |
| CyberSecurityNews | New DirtyClone Linux Vulnerability Allows Attackers to Gain Root Access Via Cloned Packets | 2026-06-26 13:04 | [Source Link](https://news.google.com/rss/articles/CBMibkFVX3lxTE1DUDMwZkNacVh1bWVUakE5U0h6VlJZLXRCTV8tUkhHWE51WXh2U05yNmwxU1JKZk50ZFBCQjZKaENCRDRTbGhpZHphMTBldmJETVp5YnM0SWRPSjR4Z1VyZDhrNUwzeTQ5ZzdBZkN30gFzQVVfeXFMTmZYTlZmc1BxdS16YUg4VXpobTl0RHdFUUxnNEVBMTczNGFpZlVINzdyajg0QUk3TWh0QUJpanZ4OWFFU2NHX08zYUUzN25BQ3Y0TUp1U3l0YTl0MGNJZGo3NGdTY3FHanJwd1FGSmN2ZGhQQQ?oc=5) |
| The Hacker News | New Linux pedit COW Exploit Enables Root Access by Poisoning Cached Binaries | 2026-06-26 13:04 | [Source Link](https://news.google.com/rss/articles/CBMif0FVX3lxTE9OUEtDRmFFUFFmRk5qUGtuUklzQ0xkYTVWWXhadEY5YUxrUDN0c1B3bWptTzRYSi1uZGNPT2dGTFItVUFaS1I0TUZPSWZqTFVwRnV1cXpxZ3pkTHVDRmg0RmxTWldjdmUyVG5aSWlDUEt5TUtTZzB2aEpiWWhHSDg?oc=5) |

---
*Canonical Source: https://www.newsylist.com/trend/2026-06-27/new-linux-pedit-cow-exploit-enables-root-access-by-poisoning-cached-binaries*
*Synthesized by Newsylist Open Intelligence Engine under E-E-A-T journalistic standards.*