Linux
Curated coverage and analysis in this editorial area.
Linux Emulated Mainframe Driver Becomes a Path to Root Escalation
A Linux kernel vulnerability allows local privilege escalation via an emulated SMC-D compatibility driver, with a public exploit demon…
GNOME 50.5 Patches CVEs and Critical Bugs: The Risk of the Missing Severity Score
GNOME 50.5 arrives with 22 updated modules and a fix for CVE-2026-88924, yet the GNOME Security Team assigns no severity score. For ad…
CVE-2026-43502: RDS Zero-Copy Bug Enables Root Escalation on Linux Since 2018
ZcopyReaper has affected the Linux kernel since 2018 with a CVSS 7.8 score. The fix landed in May 2026, but the September 21 disclosur…
Four Linux Exploits Published: Local Root via Bugs 10–21 Years Old
Security researcher Asim Manizada released working proof-of-concept exploits for four Linux kernel vulnerabilities on September 18, 20…
ZDI-26-687: Linux Kernel Open vSwitch Use-After-Free Disclosed September 14
Trend Micro's Zero Day Initiative released advisory ZDI-26-687 on September 14, 2026, detailing a use-after-free in the Linux kernel's…
Heap Overflow in Linux Kernel NTFS3 Journal: Discovery and Coordinated Patch
CVE-2026-72196, rated CVSS 8.4 HIGH, lets a local attacker with low-privileged code execute arbitrary code in the kernel during mount…
GhostLock: Public Exploit Grants Root in 5 Seconds on Linux Since 2011
CVE-2026-43499 has existed in the Linux kernel for 15 years. The public proof-of-concept requires only a local user to obtain root in…
ZDI-26-575: TOCTOU in Linux Kernel Net Scheduler Enables Local Privilege Escalation
A TOCTOU race condition in the Linux kernel's Net Scheduler packet classifier API allows local privilege escalation. The fix introduce…
Copy Fail CVE-2026-31431: Root Escalation in 732 Bytes on Linux
CVE-2026-31431 lets a local user gain root on Linux in seconds with a 732-byte script. CISA confirms active exploitation.
Arch Linux Halts AUR Package Adoptions: Third Supply-Chain Attack in Two Months
On July 30, 2026, Arch Linux suspended package adoptions in the Arch User Repository to stop an active supply-chain campaign. It is th…
AI-Assisted Kernel Exploit: Researcher Publishes Root Escalation Code for Linux
STAR Labs researcher Lee Jia Jie has released exploit code for CVE-2026-53264, a use-after-free vulnerability in the Linux kernel's ne…
GhostLock: 15-Year Linux Kernel Bug Now Publicly Exploitable, Guarantees Root
CVE-2026-43499 enables root escalation and container escape on nearly every Linux distribution since 2011. Nebula Security published t…