Linux Kernel Vulnerability Allows Unprivileged Root Access
Original title: 5-Year-Old Linux Kernel Vulnerability Allows Unprivileged Attackers to Gain Root Access
The flaw in the virt_wifi driver enables unprivileged local privilege escalation to root on default Fedora 44 Server.
A five-year-old vulnerability in the Linux kernel virt_wifi driver allows unprivileged local users to gain root access. The bug was discovered by Alexander Popov and fixed in recent kernels. An exploit is now public for default Fedora 44 Server install on x86_64.
Unconfirmed: Vendors disagree on severity rating
- Use-after-free condition during device teardown in netdev_run_todo()
- Fixed in kernel 5.15.203, 6.1.168, 6.6.134, 6.12.81, 6.18.22, 6.19.12
- Blocklisting virt_wifi module removes vulnerable code path
- Public exploit available for mainstream distribution
Impact: Unprivileged local privilege escalation to root
- 1.Check if virt_wifi driver is loaded
- 2.Blocklist virt_wifi module if not needed
- CVEs
- CVE-2026-31695
- Vendors
- FedoraAmazon LinuxRed Hat
- Products
- Linux Kernel
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-31695 | Linux kernel: wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free | 7.8 | <1% |
From the original article
3 min read at gbhackers.com
A Linux kernel flaw that sat unnoticed for nearly five years can let an unprivileged local user take full root control of a system. Tracked as CVE-2026-31695, the bug was found and fixed by researcher Alexander Popov. He has now published a working exploit against a default Fedora 44 Server install on x86_64.
By Divya · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.