# New "Bad Epoll" Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits Android

> **Newsylist Open Intelligence Dossier** · First detected: 2026-07-04 00:45 UTC · Category: Technology · Sources: 8 · Current Velocity: 5.66

## Executive Summary
A critical Linux kernel vulnerability known as "Bad Epoll" or "DirtyClone" allows unprivileged users to gain root access on servers and Android devices.

## Intelligence Brief
A new 0-day vulnerability in the Linux kernel, referred to as "Bad Epoll" and "DirtyClone" (CVE-2026-43503), enables local privilege escalation. The flaw allows unprivileged users to obtain root access on major distributions and Android devices. One report describes it as a kernel race bug.


Coverage from The Hacker News, SecurityWeek, and Rescana emphasizes the critical nature of the flaw and its impact on Android and Linux servers. Tech Times reports a 99% root exploit rate and notes that the bug bypassed AI auditing. Other reports from SQ Magazine identify the issue as a pedit COW bug.


Attention is now on patching and mitigation, with Linuxiac reporting that Canonical has confirmed fixes for Ubuntu users.

## Verified Facts & Key Claims
### What is the CVE identifier for this vulnerability?
The vulnerability is identified as CVE-2026-43503.

### Which operating systems are affected by this flaw?
The flaw affects Linux servers, major distributions, and Android devices.

### Are there any available fixes?
Canonical has confirmed that fixes are available for Ubuntu.

## Key People, Organizations & Locations
New Bad Epoll Linux Kernel Flaw Lets Unprivileged Users Gain Root Hits Android, Critical Linux, COW Bug Gives Hackers Instant Root Access, Canonical Confirms Ubuntu Fixes for DirtyClone Linux Kernel Flaw, DirtyClone CVE-2026-43503 Critical Linux Kernel Vulnerability Enables Local Privilege Escalation, Major Distributions, Linux Kernel Vulnerability Leads, Root Access, New Bad Epoll, Vulnerability Allows Root Access

## Multi-Source Evidence Table
| Source Outlet | Headline | Published (UTC) | Verification URL |
|---|---|---|---|
| CyberSecurityNews | New "Bad Epoll" 0-Day Vulnerability Allows Root Access on Linux Servers and Android Devices | 2026-07-03 19:40 | [Source Link](https://news.google.com/rss/articles/CBMibEFVX3lxTE94YVZqbS0xV2o3d2ZJNnhZM2lPWUxhNTVpUHBfSTdSekFfbldkY1VoZnhPcVVTZzF3OS1aQjNteDFaTnpaMjdqTzhFRHQ5aWl4UzBpN2Exbko3ZkU4YTdpdmpJT3VfX1FmRUVaedIBckFVX3lxTE9lSjdUa2VVNjJMR1JrbExrMEJtX043aFVxanQ4Wlh3Zm44NWRIa0lQbXVKeExBVDR1NXlFMVl5VHFtNFgzejlkbFhXMjVlX2FweV9Bd0JzcDJYaXRqUWtZNWZjRXVvX3pYa1NGbm1pZWxkdw?oc=5) |
| Korben | Fragnesia | 2026-07-03 19:40 | [Source Link](https://news.google.com/rss/articles/CBMigwFBVV95cUxPZUg5aEhyYjZKdDFrckZnSlpweW91Z01NSzM5bm9FWFdYRm5pMVhoWHZfWjM5Z0lfczBiQ09VRlFLQUFDWXlSMU5PRENyb3hCUHoySjlQNDdRdlRYenRDU3QyS0VvemRPZ0tiSWNZQ2dPa3NJT053eHpyR1JDNm5DcWtvVQ?oc=5) |
| Tech Times | Bad Epoll: Kernel Race Bug Beats AI Auditing, Hits 99% Root Exploit Rate | 2026-07-03 19:40 | [Source Link](https://news.google.com/rss/articles/CBMiwgFBVV95cUxOLURRVmlhdXMyT1R5Z0RiRWJNZTZSazRwZk5zallvUFBtS2hOd0pLQktzbFdyNllOTi1xWWNhelBoS1JwTUJjY1dET3M3cGVHZ3AwbjU3Q1o2ZDFqdmZxd05QazJYcUxFRW96MkI4MmFRMHBZRTdvNjlxNU4xempvS2FrTUV6Q3dDY0o4NXpxRVozTGpJR0FiUUZzZ0hscDFLRzVXMVptdk9wNXdnUE9mNGtuZ3FYZmpZdXFqbUFhbTd6UQ?oc=5) |
| SQ Magazine | Critical Linux pedit COW Bug Gives Hackers Instant Root Access | 2026-07-03 19:40 | [Source Link](https://news.google.com/rss/articles/CBMibkFVX3lxTE1WQ1p0S2FsZXM5Z1NHS0Qtc3lFa2VOLTdFdTI4d3h1Vk1DMGVCa0NnV2VSMjZrM2xaT2lvNGtELUxHaURjVENnb0JJaTdqT3haekl4OHpPbllRcFBWS1Y2VDZLV1ljZ0FOWTdSNkhR?oc=5) |
| Linuxiac | Canonical Confirms Ubuntu Fixes for DirtyClone Linux Kernel Flaw | 2026-07-03 19:40 | [Source Link](https://news.google.com/rss/articles/CBMijwFBVV95cUxOOG84WFJQTDVfbEZMZmNxa0xUcUdYdEVCRzJ0NDRnaFpCdGQxV0EyMWloaVRrMWRnam14S0VOUUJ5SnBYdXNzN3lJVDBkNUo4RHcyRTZPdmt2NjZhZkdMM0t6LTAzUmwtWFcwUjFSZ1RnZDdJVHJCaFo2TGl1dFl5VmhWcWxXNlV0ZmhSdGZxOA?oc=5) |
| Rescana | DirtyClone (CVE-2026-43503): Critical Linux Kernel Vulnerability Enables Local Privilege Escalation to Root on Major Distributions | 2026-07-03 19:40 | [Source Link](https://news.google.com/rss/articles/CBMi4wFBVV95cUxQMzZPanFCbnBnVjlickZzTmVxNE5FM1c1NjVRQlNRRWs3dGx3THRDdVpWSWNYOGdoUHJHUWNsbmx1Q2tpdEdOcFlEWGx2VWVkNkZPeDItQ3hpV1VLNGEzMjdBSzNfTDAwcFZOMVhjeXRyV0h4bWZERHp3d3ZONTJJTE51NVQtUTkxNENNSERqcEluNDNwaUhkcE5kNm9BeXlEYjV3anRvd3JiVFE2VW5zRnRlVTlONzIxVjcxSTZVMlNJWnR1ZnVyekE0bl9JRTJVaV9nZzNuY25Ddm9hMlZrR3E1NA?oc=5) |
| SecurityWeek | ‘DirtyClone’ Linux Kernel Vulnerability Leads to Root Access | 2026-07-03 19:40 | [Source Link](https://news.google.com/rss/articles/CBMikgFBVV95cUxQTlVYbHJaZm1GaVdPcHlZNXpYTUJzOEhRM0ppaS04QXMta1doMnRiRjJNdkRPU0N2UEhXajM5VXZGSU9VV3JXM19qQU02TjRCNXpSSVduWno0bjVaaDJXUVNWekl1dFRRSUUyUFFRbmJxcW9XM2NnRDZZSE5ZNkxySlFtSDBEYUExOWlsWm96N2wtd9IBlwFBVV95cUxPbnhhalBHMGgtd2hORV9rM3Y5LUFobElyZXhIQ2FVckFndlVFYXVSa3RuQlZhUjRtUFY3QzViellrdGZuNHZVM2FVbDVYOWNuRmNJYWwxT3FZSnN1OGJhaHEzdjkxNGhJcFJjbmpOcmdzMXQxQnBEN2s3VkZYZnRXRm5IUGc0ejVMTHF6VnJkTHg5eTFKSWZJ?oc=5) |
| The Hacker News | New "Bad Epoll" Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits Android | 2026-07-03 19:40 | [Source Link](https://news.google.com/rss/articles/CBMigAFBVV95cUxOaTdYVTZOeHhwRm5YUVgxY2tCbWFFU0lnSHplRVNkSUVOQWpKaDdFTFBPeTRDdUVHZ0l6WENyWklmUUUyS3BpVTA2eEI5ckh6UEdkcUhOTnJVVjgyTFFBMVRhTk9tS2x4YjBSRk5xVloxTkxUM2dWdG8xYWJmQmtBQQ?oc=5) |

---
*Canonical Source: https://www.newsylist.com/trend/2026-07-04/new-bad-epoll-linux-kernel-flaw-lets-unprivileged-users-gain-root-hits-android*
*Synthesized by Newsylist Open Intelligence Engine under E-E-A-T journalistic standards.*