Microsoft AI scan finds 59 Linux kernel bugs, eight with root exploits
Thirty-three CVEs are assigned so far, 24 rated High or above, and 38 fixes are already merged upstream.
68
- Mentions · 7d2
- Mentions · 30d3
- All mentions3
- First seenOct 29, 2026
- Last mentioned17h ago
Timeline
3 articles · newest firstMicrosoft AI scan reports 59 Linux kernel bugs, eight with root exploits
Thirty-three CVEs were assigned, 24 rated high or above, and 38 fixes have reached mainline.
66
Telegram for Android flaw ran code after a voice call was answered
Versions 8.6.2 through 12.10.3 were affected; 12.10.4, released in late September, fixes MediaState handling, and no CVE was assigned as of October 29.
68
Related CVEs
by mentions- CVE-2026-74544<1%7.8Linux kernel: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds u32_change() copies the user-provided…
- CVE-2026-64563<1%7.8Linux kernel: rhashtable: clear stale iter->p on table restart rhashtable_walk_start_check() has two restart paths when…
- CVE-2026-64580<1%7.8Linux kernel: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()
- Linux kernel: KEYS: encrypted: fix integer overflow of datablob_len encrypted_key_alloc() stores datablob_len in a u16
- CVE-2026-64554<1%8.8Linux kernel: netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() br_ip6_fragment() gets prevhdr, a pointer…
- CVE-2026-74562<1%8.8Linux kernel: nexthop: take nh->lock for f6i_list walks in replace check and notify fib6_check_nh_list() and…
- CVE-2026-74561<1%8.8Linux kernel: nexthop: avoid unlocked f6i_list walk in nh_rt_cache_flush nh_rt_cache_flush() walks nh->f6i_list during an…
- Use-after-free in Linux kernel GTP module (gtp_newlink error path)
- Use-after-free in Linux kernel XFRM bundle creation
Appears with
- GPT-5.4ai model · 3
- Sonnet 4.6ai model · 2
- GPT-5.5ai model · 2
- Opus 4.6ai model · 2
- GPT-5.5-cyberai model · 2
- Linux kernelproduct · 2
- Androidproduct · 2
- Telegram for Androidproduct · 1
- tgcallsproduct · 1
- Googlevendor · 1
- Microsoftvendor · 1
- Telegramvendor · 1
- Microsoftorganization · 1
- Linuxvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.