AI Agent Finds Linux Kernel Bug That Turns a Tiny Memory Write Into Root Access
XBOW disclosed CVE-2026-72018, a Linux kernel DIBS flaw that turns a 16-byte zero write into local root.
67
CVE-2026-72018
- CVSS 3.1
- 7.8 high
- EPSS
- <1%p7
- Published
- ·
- Modified
Description · NVD
In the Linux kernel, the following vulnerability has been resolved: dibs: loopback: validate offset and size in move_data() The loopback move_data() performs a memcpy into the registered DMB without checking whether offset + size exceeds the DMB length. Unlike real ISM hardware, which enforces memory region bounds natively, the software loopback has no such protection. A peer-supplied out-of-bounds offset or oversized write would result in an OOB write past the allocated kernel buffer. Add an explicit bounds check before the memcpy to reject such requests with -EINVAL.
- Weakness
- CWE-787
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
In the news
2 storiesLinux Kernel CVE-2026-72018 Flaw Lets Local Attackers Gain Root Access
CVE-2026-72018 lets local CAP_NET_ADMIN users escalate to root through a Linux SMC-D out-of-bounds write.
66