Tails Security Update 7.9.1: Critical Kernel Patches Released

, an attacker can modify network routing tables, disable the Tor-enforcing firewall, and query physical hardware for the machine’s real IP address. This is precisely why the latest Tails security update is so critical—it patches two major kernel flaws that could have turned a browser-level sandbox escape into a total deanonymization event.” (113 words)
(Total section 2: 232 words)

Section 3: “Deep Technical Breakdown: Explaining CVE-2026-43503 (“DirtyClone”)”
“The first high-severity flaw addressed in the migration to Linux kernel 6.12.94 is CVE-2026-43503, commonly dubbed “DirtyClone”. Discovered by security researchers, DirtyClone is a local privilege escalation (LPE) vulnerability with a CVSS score of 8.8. Structurally, DirtyClone is a variant of the ‘DirtyFrag’ and ‘Fragnesia’ vulnerability families, which share conceptual similarities with historical kernel bugs like Dirty COW and Dirty Pipe.” (77 words)
“The flaw resides deep within the Linux kernel’s networking stack, specifically how it handles socket buffers (known as skb) during packet cloning and routing operations