CVE-2026-43503 DirtyClone: Unprivileged User Namespace Creation for LPE

Ibrahim Saud@tektrix

•updated Jun 26, 2026•1•0•4

Detects the execution of the 'unshare' utility by non-root users with flags designed to create new user or network namespaces. This behavior is often associated with container escape attempts, privilege escalation, or efforts to bypass local security controls by creating isolated environments.