Linux News Articles

Linux KVM guest-host escape rated critical, may represent a new way to attack penguin-powered networking

Party like it’s CVE-2026-99999 – a 9.3-rated nasty called PwnEscape

5 days ago

Linux KVM guest-host escape rated critical, may represent a new way to attack penguin-powered networking

Party like it’s CVE-2026-99999 – a 9.3-rated nasty called PwnEscape

6 days ago

PwnEscape Exposes Linux Kernel Networking Flaw That Shatters VM Isolation

A critical Linux kernel bug called PwnEscape (CVE-2026-99999) lets VM guests read host memory and achieve full escape in tests. Found during Vercel's $1M challenge, the networking flaw affects broad cloud infrastructure. Patches are available across stable branches. Providers and operators must upda...

1 week ago

Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory - SwapUpdate

A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher

1 week ago

Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory

A critical Linux kernel flaw let a guest VM read host memory in Vercel's live sandboxes; host code execution was shown only in lab tests.

1 week ago

AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host - SwapUpdate

A flaw in Linux's vhost subsystem lets a local user read and write kernel memory at will and become root across nearly a decade of kernel versions. In one

1 week ago

AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host

Linux's Vghost flaw lets users with vhost device access gain root and, in specific VM setups, lets guests hijack host QEMU.

1 week ago

AI Agent Finds Linux Kernel Bug That Turns a Tiny Memory Write Into Root Access - IT Security News

2026-09-30 12:09 Autonomous security research platform XBOW has disclosed CVE-2026-72018, a high-severity Linux kernel vulnerability that converts a tightly constrained out-of-bounds memory...

3 weeks ago

Linux Kernel CVE-2026-72018 Flaw Lets Local Attackers Gain Root Access - IT Security News

2026-09-30 10:09 A high-severity Linux kernel vulnerability, tracked as CVE-2026-72018, lets a local attacker with CAP_NET_ADMIN privileges escalate to root. This exploitation involves an...

3 weeks ago

Ubuntu Container Escape Vulnerability Gets Public Exploit Before Kernel Patch Arrives | Linux Journal

Ubuntu administrators running containerized workloads have a new Linux kernel security problem to watch closely. Public exploit code is now available for CVE-2026-80521, a Linux kernel use-after-free...

New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory

A Linux KVM flaw on ARM64 can expose host kernel memory to guests and enable guest-to-host escape when nested virtualization is enabled.

CISA alerts of active exploitation of three Linux kernel flaws

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that hackers are exploiting three Linux kernel vulnerabilities, one of them rated critical.

CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild

CISA added three actively exploited Linux kernel flaws to its KEV catalog, including bugs that can enable local privilege escalation and DoS.

18-Year-Old Linux SCTP Flaw Could Let Local Users Gain Root and Escape Containers - SwapUpdate

Swati KhandelwalAug 07, 2026Linux / Vulnerability

18-Year-Old Linux Kernel SCTP Vulnerability Lets Attackers Gain Root and Escape Containers - IT Security News

2026-08-08 11:08 SCTPhantom, tracked as CVE-2026-64564, is a high-severity Linux kernel use-after-free vulnerability in the Stream Control Transmission Protocol (SCTP) Dynamic Address...

18-Year-Old Linux Kernel SCTP Vulnerability Lets Attackers Gain Full Root on Host - IT Security News

2026-08-07 21:08 A newly disclosed Linux kernel vulnerability, dubbed SCTPhantom and tracked as CVE-2026-64564, allows attackers to escalate from unprivileged local access to full root and...

18-Year-Old Linux Kernel SCTP Vulnerability Lets Attackers Gain Full Root on Host

A newly disclosed Linux kernel vulnerability, dubbed SCTPhantom and tracked as CVE-2026-64564, allows attackers to escalate from unprivileged local access to full root and even escape containers to compromise the underlying host.

CVE-2026-64561 Zapscape Lets KVM Guests Escape to Linux Host With Root Privileges - IT Security News

2026-08-07 16:08 A Linux kernel vulnerability, tracked as CVE-2026-64561 and named Zapscape, could allow attackers to escape a KVM virtual machine and take control of its underlying Linux...

CVE-2026-64561 Zapscape Lets KVM Guests Escape to Linux Host With Root Privileges

A Linux kernel flaw, tracked as CVE-2026-64561 (Zapscape), allows KVM guests to escape to the Linux host with root privileges.

18-Year-Old Linux SCTP Flaw Could Let Local Users Gain Root and Escape Containers

Linux SCTP flaw CVE-2026-64564 dates back to 2008 and Tencent researchers say it could escape containers and gain host root.

New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts

Swati KhandelwalAug 06, 2026Virtualization Security / Linux

New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts

Zapscape could let guest root escape nested KVM and execute code on the Linux host through a shadow-MMU use-after-free; no in-wild exploitation is cla

New Release: Tails 7.10.1 | Tor Project

This release is an emergency release to fix critical security vulnerabilities in the Linux kernel and the expat XML library. Changes and updates Update the Linux kernel to 6.12.100, which fixes...

New OVSwrap Linux Vulnerability Lets Attackers Gain Root Access

A newly disclosed Linux kernel vulnerability, tracked as CVE-2026-64531 and dubbed OVSwrap, allows unprivileged local users to escalate privileges to root on a wide range of popular Linux distributions.

New OVSwrap Linux Kernel Flaw Lets Local Users Gain Root via Open vSwitch

CVE-2026-64531 lets local users exploit Open vSwitch kernel memory corruption to gain root, with a public PoC covering roughly 800 builds.