Impact Assessment for CVE-2026-43503 for vCenter 8.x

Products

• VMware vCenter Server 8.0

Issue/Introduction

DirtyClone, tracked as CVE-2026-43503, is a Linux kernel local privilege escalation in the networking stack: some skb fragment-transfer paths drop the SKBFL_SHARED_FRAG marker that blocks in-place writes, letting ESP (IPsec) input decrypt directly over file-backed page-cache pages.

Environment

vCenter 8.x

Resolution

VMware By Broadcom is aware of CVE-2026-43503.

Please refer to the release notes for existing and forthcoming product releases for any updates in relation to this CVE.

Should you require further information please contact Broadcom support  Creating and managing Broadcom cases.