Linux News Articles

PoC Exploit Released for Guest-to-Host Escape Linux Kernel Vulnerability - IT Security News

A proof-of-concept (PoC) exploit has been released for a critical Linux kernel vulnerability, CVE-2026-46316, that enables a guest-to-host escape in KVM environments on arm64 systems. The flaw, named “ITScape,” allows attackers to break out of a virtual machine and execute…Read more →

1 week ago

PoC Exploit Released for Linux Kernel Guest-to-Host Escape Vulnerability - IT Security News

A proof-of-concept (PoC) exploit has been publicly released for a critical Linux kernel vulnerability, tracked as CVE-2026-46316, enabling guest-to-host escape in KVM/arm64 environments. The flaw, dubbed “ITScape” by security researcher Hyunwoo Kim (V4bel), affects the Kernel-based Virtual Machine (...

1 week ago

One tiny Linux typo just opened the door to root access

CVE-2026-23111 exposes Linux systems to local-root attacks via nf_tables, making kernel updates and reboots urgent as public exploit details spread fast today!

1 week ago

High-Severity Vulnerability In Linux Caused By a Single Errant Character - Slashdot

An anonymous reader quotes a report from Ars Technica: Researchers have analyzed a high-severity vulnerability in Linux that's able to escalate untrusted users to root by exploiting a bug you don't often see: a single errant character inside the kernel. The vulnerability, tracked as CVE-2026-23111, ...

1 week ago

Linux Systems Exposed as Public Exploits Target One-Character Kernel Flaw - IT Security News

  Several researchers have recently published fully functional exploit code demonstrating reliable privilege escalation from an unprivileged local account to root access following the discovery of a newly disclosed Linux kernel vulnerability. As CVE-2026-23111 has been assigned, the vulnerability ca...

2 weeks ago

Linux Kernel Flaw Allows Local Attackers to Gain Root Privileges - IT Security News

A newly disclosed Linux kernel vulnerability tracked as CVE-2026-23111 allows local attackers to escalate privileges to root by exploiting a use-after-free flaw in the nftables subsystem. The vulnerability, patched upstream on February 5, 2026, affects the netfilter framework, specifically nftables,...

2 weeks ago

One-Character Linux Kernel Flaw Enables Local Root Access, Exploits Now Public

Swati KhandelwalJun 08, 2026Linux / Vulnerability

2 weeks ago

One-Character Linux Kernel Flaw Enables Local Root Access, Exploits Now Public

CVE-2026-23111 is a Linux kernel nf_tables use-after-free that lets an unprivileged local user escalate to root and escape a container.

2 weeks ago

New Linux Kernel Vulnerability Lets Attackers Escalate Privileges to Root - IT Security News

A use-after-free vulnerability in the Linux kernel’s nftables subsystem has been disclosed, enabling unprivileged local attackers to escalate privileges to root on widely deployed distributions including Debian Bookworm, Debian Trixie, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. Tracked as CVE-2026-2311...

2 weeks ago

Linux Kernel Flaw CVE-2026-46333 Exposes Systems to Local Root Attacks via ptrace Race

CVE-2026-46333 exposes a nine-year-old race in the Linux kernel's ptrace exit path. Unprivileged users can steal file descriptors from dying SUID processes to read SSH keys, /etc/shadow, or run commands as root on default systems. Vendors issued patches quickly, but temporary mitigations via Yama sc...

1 month ago

Linux Kernel Flaw Lets Unprivileged Users Access Root-Only Files, Execute Arbitrary Commands as Root - Slashdot

Qualys's Threat Research Unit (TRU) has discovered and published a logic flaw in Linux kernel "that permits an unprivileged local user to disclose sensitive files and execute arbitrary commands as root on default installations of several major distributions." Friday their blog pointed out "The bug...

1 month ago

9-Year-Old Linux bug Found by Researchers, Could Leak Data - IT Security News

Experts have revealed details of a bug in the Linux kernel that stayed unnoticed for nine years. The flaw is tracked as CVE-2026-46333 (CVSS score: 5.5).  Improper bug management  The incident is improper privilege management that could have allowed threat…Read more →

1 month ago

9-Year-Old Linux Kernel Flaw Enables Root Command Execution on Major Distros

Ravie LakshmananMay 21, 2026Linux / Vulnerability

1 month ago

Qualys publishes advisory for Linux kernel flaw CVE-2026-46333 - Cyber Risk Leaders

Qualys Threat Research Unit (TRU) has published an advisory for CVE-2026-46333, a local logic flaw in the Linux kernel’s __ptrace_may_access() function that it says could allow an unprivileged local user to disclose sensitive files and execute arbitrary commands as root on default installations of s...

1 month ago

Nine-year-old Linux Kernel Vulnerability Let Attackers Exfiltrate SSH Private Keys

A newly disclosed Linux kernel flaw lets attackers steal SSH keys and gain root access on affected systems.

1 month ago

9-Year-Old Linux Kernel Flaw Enables Root Command Execution on Major Distros

CVE-2026-46333 is a nine-year Linux kernel improper privilege management flaw introduced in November 2016 with a CVSS score of 5.5.

1 month ago

Nine-Year-Old Kernel Flaw Puts Linux SSH Private Keys at Risk - IT Security News

A newly disclosed Linux kernel vulnerability, tracked as CVE-2026-46333, poses a serious risk to SSH private keys and other sensitive credentials. The flaw, present in the kernel since 2016, allows a local attacker to escalate from a basic shell account…Read more →

1 month ago

DirtyDecrypt PoC Released for Linux Kernel CVE-2026-31635 LPE Vulnerability

Proof-of-concept (PoC) exploit code has now been released for a recently patched security flaw in the Linux kernel that could allow for local privilege

DirtyDecrypt Linux Kernel Vulnerability PoC Exploit Code Released - IT Security News

A working proof-of-concept (PoC) exploit for a high-severity Linux kernel local privilege escalation vulnerability dubbed DirtyDecrypt, also tracked as DirtyCBC, enables local attackers to gain full root access on affected systems. Security analyst Will Dormann technically attributes the flaw to CVE...

DirtyDecrypt PoC Released for Linux Kernel CVE-2026-31635 LPE Vulnerability

DirtyDecrypt PoC targets CVE-2026-31635 in CONFIG_RXGK Linux systems, enabling local privilege escalation.

PoC Released for DirtyDecrypt Linux Kernel Vulnerability

PoC code has been released for DirtyDecrypt, a recently patched Linux kernel vulnerability allowing privilege escalation to root.

Linux kernel flaw opens root-only files to unprivileged users

Plus ModuleJail, a radical proposal for minimizing the impact of similar bugs

Linux kernel flaw opens root-only files to unprivileged users

Plus ModuleJail, a radical proposal for minimizing the impact of similar bugs

Fragnesia Flaw Hands Linux Users Root Access: Third Kernel Bug in Two Weeks, Born From Patch

A newly disclosed Linux kernel flaw nicknamed Fragnesia — tracked as CVE-2026-46300 — lets any unprivileged local user gain root on essentially every major Linux distribution shipped before May 13,

Fragnesia Exposes Linux Kernel's Fragile Networking Code Yet Again

Fragnesia (CVE-2026-46300) delivers yet another local root exploit in the Linux kernel, exploiting XFRM ESP-in-TCP logic to write to read-only page cache. Following Dirty Frag by days, it forces rapid patching across distributions while exposing persistent weaknesses in networking and memory managem...