Local Privilege Escalation Vulnerability in Linux Kernel Utilizing Netfilter
CVE-2026-23111

7.8HIGH

Key Information:

Vendor

Linux
Status
Linux
Vendor
CVE Published:
13 February 2026

Badges

📈 Trended📈 Score: 4,490👾 Exploit Exists🟡 Public PoC📰 News Worthy

What is CVE-2026-23111?

false

Affected Version(s)

Linux 25aa2ad37c2162be1c0bc4fe6397f7e4c13f00f8 < 8c760ba4e36c750379d13569f23f5a6e185333f5

Linux d60be2da67d172aecf866302c91ea11533eca4d9

Linux 628bd3e49cba1c066228e23d71a852c23e26da73 < 42c574c1504aa089a0a142e4c13859327570473d

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-23111
Created by 0xBlackash

cve-2026-23111-poc
Created by bakano98

CVE-2026-23111
Created by HORKimhab

News Articles

favicon imagePcquest

One tiny Linux typo just opened the door to root access

CVE-2026-23111 exposes Linux systems to local-root attacks via nf_tables, making kernel updates and reboots urgent as public exploit details spread fast today!

3 weeks ago

favicon imageSlashdot

High-Severity Vulnerability In Linux Caused By a Single Errant Character - Slashdot

An anonymous reader quotes a report from Ars Technica: Researchers have analyzed a high-severity vulnerability in Linux that's able to escalate untrusted users to root by exploiting a bug you don't often see: a single errant character inside the kernel. The vulnerability, tracked as CVE-2026-23111, ...

3 weeks ago

favicon imageIt Security News

Linux Systems Exposed as Public Exploits Target One-Character Kernel Flaw - IT Security News

  Several researchers have recently published fully functional exploit code demonstrating reliable privilege escalation from an unprivileged local account to root access following the discovery of a newly disclosed Linux kernel vulnerability. As CVE-2026-23111 has been assigned, the vulnerability ca...

3 weeks ago

References

https://git.kernel.org/stable/c/8c760ba4e36c750379d13569f...
https://git.kernel.org/stable/c/b9b6573421de51829f7ec1cce...
https://git.kernel.org/stable/c/42c574c1504aa089a0a142e4c...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • 📈

    Vulnerability started trending

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • 📰

    First article discovered by It Security News

  • Vulnerability published

  • Vulnerability Reserved

.