Tails 7.9.1 Patches DirtyClone Flaw and Updates Tor Browser: What to Know

If you use Tails for sensitive work—whether as a journalist, activist, or just someone who values privacy—you know the importance of keeping the system up to date. The latest release, Tails 7.9.1, landed on July 1, 2026, and it’s a significant one. It fixes a kernel vulnerability known as DirtyClone and bundles an updated Tor Browser. Here’s what you need to understand about the update and why you should install it without delay.

What Happened

Tails 7.9.1 addresses a privilege escalation flaw in the Linux kernel that security researchers have named DirtyClone. The vulnerability affects many Linux distributions, and Canonical has already confirmed that Ubuntu fixes are available. The exact CVE identifier for DirtyClone isn’t widely detailed in public summaries yet, but the flaw allows a local attacker to gain elevated privileges on affected systems. For Tails, which is designed to leave no trace on the host computer, a kernel-level exploit could undermine its core protections.

Alongside the kernel patch, Tails 7.9.1 updates Tor Browser to the latest version. While the release notes don’t specify every change, Tor Browser updates typically include security fixes, improved anonymity safeguards, and compatibility updates for the Tor network. This is a routine but essential part of staying safe online.

Why It Matters

Tails is used in high-stakes environments where a single mistake can have real-world consequences. The DirtyClone vulnerability is especially dangerous because it can be exploited locally—meaning if someone has physical access to your machine or can run code on it through another vector, they might be able to take full control. Because Tails runs from a USB stick or DVD, many users assume it is immune to such attacks, but the underlying kernel still runs on the host hardware. A patched kernel closes that door.

The Tor Browser update also matters. Anonymity online depends on the browser’s ability to resist fingerprinting and block tracking. Outdated versions may have known weaknesses that attackers could leverage. By updating to the latest Tor Browser inside Tails, you maintain the privacy guarantees the OS is built on.

What You Should Do

Upgrade to Tails 7.9.1 as soon as possible. The process depends on how you run Tails:

  • If you use persistent storage: You can upgrade directly from within Tails by going to the menu and selecting “Upgrade Tails.” The system will download and apply the update.
  • If you create fresh USB sticks each time: Download the new ISO from the official Tails website and write it to a USB using a tool like Rufus or dd. Then reboot from the new drive.
  • If you have an automatic upgrade set up, Tails should prompt you to restart and install the update. Follow the on-screen instructions.

Because Tails is amnesic by design, any persistent storage you have will remain intact across upgrades, as long as you choose the upgrade option that preserves it. However, it’s always a good practice to back up your persistent data before a major update, just in case something goes wrong.

If you haven’t upgraded yet, do it now. The combination of a kernel security fix and a refreshed Tor Browser makes Tails 7.9.1 a must-have for anyone serious about online privacy.

Sources: This article draws on reports from Linuxiac covering the Tails 7.9.1 release and Canonical’s confirmation of Ubuntu fixes for the DirtyClone vulnerability. Additional context comes from general knowledge of how Tails and Tor Browser updates work.