Linux Foundation

Mentions · 7d0
Mentions · 30d0
All mentions10
First seenAug 13, 2026
Last mentionedSep 18, 2026

Timeline

10 articles · newest first

Linux Kernel Hit by 4 LPE Flaws Enabling Attackers to Gain Root Shell

Four Linux kernel privilege escalation flaws (DirtyAH6, TUNderflow, PPPoEject, DiagSpill) allow local root access; fixes ship in stable kernel branches with PoC exploits published.

GBHackersSep 18, 10:22 UTC · Sep 18, 2026VulnerabilityCVE-2026-80844 CVE-2026-81000 CVE-2026-68121+18 · 4 reads

The skb that wasn't freed - the Fragnesia primitive via Open vSwitch

Doyensec details CVE-2026-90049 in Open vSwitch, enabling deterministic Linux kernel local privilege escalation on default major distribution installs.

Lobsters · securitySep 17, 08:39 UTC · Sep 17, 2026VulnerabilityCVE-2026-90049 CVE-2026-89487 CVE-2026-80977+29 · 5 reads

AI is adding to the review load on open-source projects, many of them thinly funded

ACM Technology Policy Council authors warn AI-generated code is overwhelming thinly funded open-source maintainers, raising software supply chain security risks.

Help Net SecuritySep 17, 04:30 UTC · Sep 17, 2026AI industry3 · 1 read

TPMSpy: Validation of Measured Boot Systems by Low-Level Tracing of TPM Usage

Researchers present TPMSpy, a platform-agnostic method validating TPM Measured Boot via low-level tracing, finding inconsistent Linux systemd measurements that break remote attestation and LUKS decryption.

arXiv cs.CRSep 4, 11:23 UTC · Sep 4, 2026Research1

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA added three actively exploited vulnerabilities to its KEV catalog: CVE-2023-49105 (ownCloud), CVE-2026-53362 (Linux kernel), and CVE-2026-66384 (JFrog Artifactory).

CISA AdvisoriesAug 27, 12:00 UTC · Aug 27, 2026Exploit / PoCExploitedCVE-2023-49105 CVE-2026-53362 CVE-2026-663842 · 1 read

Linux Foundation Introduces TRACE Standard for AI Runtime Evidence

The Linux Foundation introduced TRACE, an open standard providing hardware-attested runtime and compliance evidence for AI agents.

Infosecurity MagazineAug 26, 09:10 UTC · Aug 26, 2026AI tools & infra2 · 1 read

Exclusive: Linux Foundation's Akrites to Go Live in September

The Linux Foundation's Akrites initiative will go live in September, accepting AI-powered vulnerability reports for open-source projects.

Infosecurity MagazineAug 19, 15:30 UTC · Aug 19, 2026Tools1

ZDI-26-573: Linux Kernel KSMBD Response Header Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI disclosed an unauthenticated out-of-bounds read (CVE-2026-68431) in Linux Kernel KSMBD causing sensitive information disclosure, CVSS 9.3.

ZDI Published AdvisoriesAug 13, 05:00 UTC · Aug 13, 2026VulnerabilityCVE-2026-684311 · 1 read

ZDI-26-571: Linux Kernel Net Scheduler Packet Classifier API Use-After-Free Local Privilege Escalation Vulnerability

ZDI disclosed a use-after-free local privilege escalation flaw (CVE-2026-64530) in the Linux Kernel net scheduler packet classifier API.

ZDI Published AdvisoriesAug 13, 05:00 UTC · Aug 13, 2026VulnerabilityCVE-2026-645302

ZDI-26-576: Linux Kernel XFRM Race Condition Local Privilege Escalation Vulnerability

ZDI disclosed a race condition local privilege escalation flaw in the Linux Kernel XFRM subsystem, CVSS 7.5, with no CVE assigned.

ZDI Published AdvisoriesAug 13, 05:00 UTC · Aug 13, 2026Vulnerability3 · 1 read

Related CVEs

by mentions

CVE-2023-4910543%9.8
Improper Authentication in ownCloud Server Allows Unauthenticated File Access
published Nov 21, 2023ownCloud Server (owncloud/core)KEV
CVE-2026-53362<1%7.8
Out-of-Bounds Write in Linux Kernel IPv6 Stack via UDPv6 MSG_SPLICE_PAGES
published Jul 4, 2026Linux kernelKEV
CVE-2026-66384<1%5.3
Authenticated Path Traversal Write in JFrog Artifactory Exploited in the Wild
published Aug 12, 2026JFrog ArtifactoryKEV
CVE-2026-64530<1%9.8
Linux kernel: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle tcf_classify() can return TC_ACT_CONSUMED…
published Jul 26, 2026Linux kernel
CVE-2026-900499.3
Linux kernel skb_zerocopy() error-path flaw risks UAF/memory corruption via Open vSwitch
published Sep 16, 2026Linux kernel (net/skbuff skb_zerocopy(), reachable via Open vSwitch kernel datapath and nfnetlink_queue)
CVE-2026-4328494%8.8
Linux kernel ESP-in-UDP decrypts in place over shared splice pages (CWE-123)
published May 8, 2026Linux kernelPoC
CVE-2026-74469<1%8.8
Linux kernel: sctp: prevent peer transport count overflow sctp_assoc_add_peer() increments the association's 16-bit…
published Aug 15, 2026Linux kernel
CVE-2026-4350093%7.8
Out-of-bounds write in Linux kernel AF_RXRPC decryption enables root access
published May 11, 2026Linux kernel
CVE-2026-68121<1%7.8
Use-After-Free in Linux Kernel PPPoE Send Path Enables Local Root (PPPoEject)
published Aug 10, 2026Linux kernel (PPPoE subsystem, pppoe_sendmsg())PoC
CVE-2026-894877.8
Linux kernel Open vSwitch error-path bug enables local page-cache writes
published Sep 11, 2026Linux kernel (openvswitch module)

Appears with

Linux kernelproduct · 6
Linux Foundationorganization · 4
Zero Day Initiativevendor · 3
Zero Day Initiativeorganization · 3
Open vSwitchproduct · 1
Kernel security teamorganization · 1
systemdproduct · 1
ACM Technology Policy Councilorganization · 1
LUKSproduct · 1
ownCloudproduct · 1
JFrogvendor · 1
Apache Software Foundationorganization · 1
CodeMenderproduct · 1
Microsoftvendor · 1
Akritesproduct · 1
TPMSpyproduct · 1

Entities are extracted by the model from each article. First seen Aug 13, 2026, last mentioned Sep 18, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.