Microsoft reports 59 Linux kernel bugs and 33 CVEs from AI scans
Eight CVEs had lab-confirmed local root exploits; fixes for 38 reports are in mainline, and bugs averaged 8.1 years old.
Stories per day · 30 days
13 RSS
Relatedlinux20privilege-escalation8openbsd6use-after-free6vm-escape5cve-2026-999994freebsd3poc3pwnescape3rcu3ubuntu3vercel3android2anthropic2apple2claude-code2firecracker2integer-overflow2
98 stories, newest first · one card per story
Stories tagged #kernel
Veeam Software Appliance VMs fail to boot on AMD EPYC hosts
Veeam Software Appliance VMs running on certain AMD EPYC processors intermittently fail to boot after jitterentropy health test failure in FIPS mode.
1
Ubuntu Advises on Linux Kernel NVIDIA Vulnerabilities
Ubuntu releases security update for Linux kernel flaws, including CVE-2023-20585 allowing out-of-bounds conditions in SEV-SNP guests.
OpenAI AI model generates 948 Linux kernel root exploits in single run
OpenAI's frontier model produced 948 local privilege escalation exploits from Linux kernel bugs at a cost of $1,213,430.
Kremlin-linked hackers exploit iOS and Android flaws to infect phones
Attackers injected JavaScript to profile devices and steal cookies, Wi-Fi passwords, and full device data from visitors to targeted sites including america250.org.
Akamai BloghighLinux Kernel TCP Stack Remote Use-After-Free Vulnerability
Akamai reports on CVE-2026-98432, a remote use-after-free flaw in the Linux kernel TCP stack.
Ubuntu delays critical Linux kernel TCP vulnerability patch
Ubuntu has not patched CVE-2026-98432 which allows remote root on servers, despite Debian and others shipping the fix.
Linux kernel CVE-2026-98432 enables unauthenticated RCE
The race condition in TCP SYN handling for IPv4 allows unauthenticated remote code execution in the Linux kernel.
Linux kernel TCP UAF CVE-2026-98432 rated Critical
Anthropic researcher reported a PoC for remote root access on Linux servers with multipath TCP listeners.
3
init_on_free=1 added as interim mitigation for CVE-2026-98432
init_on_free=1 kernel boot parameter serves as additional mitigation for nftables and MPTCP issues.
Linux before several 5.x–7.x releases affected by CVE-2026-98432
Canada’s Cyber Centre urges administrators to review the linked material and apply updates when available.
Blog explains Apple arm64e pointer authentication and PAC keys
The author says the post has no exploit or bypass and that tests ran on a stock Mac.
4
FreeBSD kernel TTY race condition allows local privilege escalation
CVE-2026-58093 is rated CVSS 7.8 and requires low-privileged code execution before exploitation.
Apple iOS 27.2 fixes 163 flaws, including critical WebKit RCE
The release addresses memory corruption, sandbox escape, kernel writes, and unauthorized access to sensitive user data across many components.
OpenBSD 8.0 adds firewall hardening and vulnerability fixes
Errata also cover a remotely triggerable IPsec AES-GMAC kernel heap overflow on specific hardware; AES-GCM is unaffected.
Microsoft's WESP aims to move EDR out of the Windows kernel
Insider builds already include wesp.sys, a mini-filter at altitude 329500, and user-mode API espclient.dll.
Two unfixed Linux KSMBD flaws allow remote code execution, CVSS 9.0
One flaw needs no authentication on port 445; neither has a CVE or a confirmed mainline fix.
PCAN Windows drivers through 5.1.2 can crash the kernel
Six local flaws are fixed in version 5.1.4; CISA lists medium CVSS scores and no exploitation status.
3
OpenBSD 7.9 local root exploit chains old BSD bug with kernel flaw
Calif’s public chain bypasses KARL, SMAP, and SMEP; OpenBSD patched both issues in September via syspatch.
2
Linux bugs fixed per release over time: >2× rise since 2026-04
Linux 7.2 was the kernel's second-busiest release, while bugs fixed per release more than doubled since April 2026.
OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root
Researchers published a local OpenBSD kernel exploit chaining a decades-old shared-memory bug with an out-of-bounds write to gain root.
Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug
Researchers published a local OpenBSD 7.9 root exploit chaining a 1988 shared-memory bug with a kernel use-after-free.
1
Infinity Core: Linux Kernel Core LPEs
Researchers disclosed six Linux kernel flaws enabling local privilege escalation, container escape, and Android compromise.
Big Fish: Exploiting a 37-Year-Old Kernel Bug in OpenBSD
Calif details a patched OpenBSD local-root bug tracing to a 37-year-old shared-memory counter.