Linux before several 5.x–7.x releases affected by CVE-2026-98432
Canada’s Cyber Centre urges administrators to review the linked material and apply updates when available.
44
- Mentions · 7d3
- Mentions · 30d8
- All mentions25
- First seenSep 4, 2026
- Last mentioned2h ago
Timeline
25 articles · newest firstLinux kernel Logitech HIDPP use-after-free allows local privilege escalation
ZDI rates CVE-2026-93826 at CVSS 7.8 and requires existing low-privileged code execution.
44
Public Linux kernel root exploit appears before a CVE or fix
Sysdig says six ZDI reports went to lists on October 20–21, and several still lack a released-kernel fix.
74
Two unfixed Linux KSMBD flaws allow remote code execution, CVSS 9.0
One flaw needs no authentication on port 445; neither has a CVE or a confirmed mainline fix.
78
Unpatched Linux kernel flaws posted to the public LKML
Trend Micro ZDI reports include two CVSS 9.0 remote code execution issues; mainline fixes are not out, though some patches are in testing.
72
Linux KVM/x86 stale SMM MMIO cache bypasses write tracking
A guest can make a tracked RAM write look like KVM_EXIT_MMIO, so a VMM may change the page without write tracking.
52
PwnEscape: Guest-to-Host KVM Escape (CVE-2026-99999)
Researchers show CVE-2026-99999 lets a KVM guest escape to the host via Linux checksum handling.
76
Infinity Core: Linux Kernel Core LPEs
Researchers disclosed six Linux kernel flaws enabling local privilege escalation, container escape, and Android compromise.
78
Exploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape
Unpatched Linux kernel flaw (CVE-2026-80521) enables container escape to host root, with exploit code released for Ubuntu.
85
Linux KVM/arm64 Vulnerability Lets Attackers Escape Virtual Machines and Gain Host Access
CVE-2026-89775 lets a malicious ARM64 KVM guest skip TLB invalidation and access host memory.
68
Organizations Warned of 3 Exploited Linux Kernel Vulnerabilities
CISA added three exploited Linux kernel flaws to its KEV catalog, ordering federal agencies to patch within three days.
75
Re: A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill
Follow-up discussion on four Linux kernel local root vulnerabilities (DirtyAH6, PPPoEject, TUNderflow, DiagSpill) weighs per-module kernel packaging trade-offs.
40
Re: A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill
oss-security thread proposes hashing sorted Module.symvers CRCs under CONFIG_MODVERSIONS to fix four Linux local root vulnerabilities without breaking module ABI.
45
Re: A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill
Follow-up on four Linux kernel local root flaws (DirtyAH6, PPPoEject, TUNderflow, DiagSpill), noting PPPoE is ubiquitous on ISP gateways.
45
Re: A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill
oss-security follow-up on four Linux local root vulnerabilities—DirtyAH6, PPPoEject, TUNderflow, DiagSpill—debates distribution-specific patching challenges.
60
Re: A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill
Discussion of splitting rare Linux kernel modules like PPPoE and SCTP into separate packages to reduce attack surface after four local root vulns.
45
Re: A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill
oss-security follow-up on four Linux kernel local root vulnerabilities — DirtyAH6, PPPoEject, TUNderflow, DiagSpill — praising the advisory's disclosure quality.
48
Re: A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill
Follow-up on four Linux local root vulnerabilities dubbed DirtyAH6, PPPoEject, TUNderflow, and DiagSpill, advising kernel attack surface reduction as mitigation.
55
Linux Kernel Hit by Four Privilege Escalation Flaws Enabling Root Access
Four patched Linux kernel flaws—DirtyAH6, TUNderflow, PPPoEject, and DiagSpill—let local attackers corrupt kernel memory and gain root privileges.
68
CISA Adds One Known Exploited Vulnerability to Catalog
CISA added actively exploited Linux kernel flaw CVE-2025-39682 to its KEV catalog, requiring federal agencies to prioritize remediation under BOD 26-04.
70
CVE-2026-89775: Guest-to-Host Escape in KVM/arm64
Disclosed CVE-2026-89775 lets a guest VM escape to the host on KVM/arm64 systems with nested virtualization enabled.
56
New IoT Malware Uses Public Linux Exploits to Gain Root and Launch DDoS Attacks
Nozomi details KATARU, an IoT botnet that brute-forces Telnet, exploits public Linux kernel flaws for root access, and launches multi-protocol DDoS attacks.
48
Re: Linux kernel LPEs: ZcopyReaper (CVE-2026-43502) and 20 more
Linux kernel developers discuss a batch of 21 local privilege escalation CVEs, including ZcopyReaper (CVE-2026-43502) in the RDS networking driver.
45
Linux kernel LPEs: ZcopyReaper (CVE-2026-43502) and 20 more
Researchers disclosed CVE-2026-43502 (ZcopyReaper), a Linux kernel local privilege escalation in the RDS zerocopy send path, fixed in v7.1-rc3.
65
WireGuard-Linux Stack-Based Buffer Overflow in lsiio (Linux IIO Userspace Tool) Due to Unbounded fscanf
The Linux IIO userspace tool lsiio has a stack buffer overflow in find_type_by_name() caused by unbounded fscanf reads of oversized filesystem-backed attribute values.
12
Related CVEs
by mentions- CVE-2025-396823%9.8Improper Condition Check in Linux Kernel kTLS Receive Path Enables Local Info Leak/DoS
- Improper TLB invalidation in Linux kernel KVM/arm64 risks cross-VM memory exposure
- CVE-2026-43502<1%7.8Linux kernel: net/rds: handle zerocopy send cleanup before the message is queued
- CVE-2026-53266<1%8.8Out-of-Bounds Write in Linux Kernel ebtables SNAT ARP Rewrite (netfilter bridge)
- CVE-2025-399642%5.5Race Condition in Linux Kernel Crypto Socket (af_alg_sendmsg)
- CVE-2026-98432<1%9.8Use-after-free in Linux kernel IPv4 TCP options
- CVE-2026-4328494%8.8Linux kernel ESP-in-UDP decrypts in place over shared splice pages (CWE-123)
- CVE-2026-74469<1%8.8Linux kernel: sctp: prevent peer transport count overflow sctp_assoc_add_peer() increments the association's 16-bit…
- CVE-2026-80521<1%7.8Linux kernel: af_unix: Unlink scc_entry in unix_del_edge(). Kyle Zeng reported that GC could free a dead SCC partially
- CVE-2026-81000<1%7.8Linux kernel TUN/TAP headroom integer underflow enables local memory corruption
Appears with
- Linux kernelproduct · 19
- KVMproduct · 4
- Zero Day Initiativeorganization · 4
- oss-securityorganization · 3
- vmwgfxproduct · 2
- CISAorganization · 2
- Trend Microvendor · 2
- ConnManproduct · 2
- ksmbdproduct · 2
- DepthFirstorganization · 1
- TuxCareorganization · 1
- Module.symversproduct · 1
- OpenWrtvendor · 1
- Nozomivendor · 1
- Red Hatorganization · 1
- dfs-large1ai model · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.