Microsoft reports 59 Linux kernel bugs and 33 CVEs from AI scans
Eight CVEs had lab-confirmed local root exploits; fixes for 38 reports are in mainline, and bugs averaged 8.1 years old.
Stories per day · 30 days
12 RSS
Relatedubuntu37use-after-free15privilege-escalation13openai10denial-of-service6ksmbd6usn6amd5canonical5firefox5gpt-65mptcp5remote-code-execution5sev-snp5ax254cisa-kev4claude4ipv44
142 stories, newest first · one card per story
Stories tagged #linux-kernel
Veeam warns critical Linux kernel flaw could crash backup appliances
Veeam identifies use-after-free in Linux kernel affecting backup appliances; patched kernel available for 13.1 versions.
Ubuntu patches Linux kernel flaws, including AMD SEV-SNP issue
A local attacker with hypervisor access could use CVE-2023-20585 to corrupt SEV-SNP guest memory integrity.
Ubuntu kernel update addresses flaws that could compromise the system
USN-9027-1 covers x86, hardware monitoring, OCFS2, IPv4, Ethernet bridge, Netfilter and XFRM flaws.
Ubuntu patches Linux kernel flaws in Azure CVM images
USN-9039-1 says an attacker could possibly use flaws in multiple kernel subsystems to compromise the system.
Ubuntu fixes Linux kernel flaws in drivers, F2FS and networking
USN-9032-1 lists nine CVEs spanning GPU, bonding, F2FS, tracing, networking core, IUCV and RxRPC.
Azure Linux 3.0.2022 bundles more than 470 CVE fixes
The kernel moves to 6.6.161.1, and Microsoft distrusts certificates tied to the eMudhra incident.
0sec Labs open-sources 0, an AI security harness
The MIT or Apache-2.0 research preview uses a bring-your-own model and self-reports 93 of 95 XBOW solves.
Linus Torvalds sees AI-prompted patch flood peak
Linux kernel developers report AI-found fixes now outpacing new bug reports in some areas, suggesting the patchpocalypse is easing.
1
OpenAI releases GPT-6 Cyber, rated Critical for cyber capability
Access starts with approved Daybreak Red customers after OpenAI said the model stayed in scope over 99 percent of the time.
1
OpenAI AI uncovers 948 Linux kernel privilege escalation vulnerabilities
AI agents validated 948 Linux kernel flaws in 30 hours, with patches starting within 10 days and bounties valued at $18.9M-$66.3M.
2
OpenAI pipeline validates 948 Linux privilege escalation exploits
OpenAI’s autonomous pipeline discovered and patched 948 local privilege escalation vulnerabilities in the Linux kernel at a cost of $1.2 million.
1
Ubuntu kernel update fixes Xen netback DoS and Bluetooth flaw
A guest can exhaust backend memory, and a local user may crash the system or possibly run code.
Ubuntu Azure CVM kernel update fixes AX.25 use-after-free
A local attacker can crash the system via CVE-2022-1205; other listed flaws could compromise the system.
Ubuntu AWS kernel fix addresses Xen backend memory DoS
A guest that stops processing packets can exhaust kernel memory in the Xen network backend domain.
Ubuntu fixes Linux kernel (OEM) flaws that could compromise systems
USN-8960-1 covers many kernel subsystems, but the notice snippet names no CVE ids or fixed versions.
Ubuntu patches Linux kernel (BlueField) flaws in USN-8965-1
The notice lists 11 CVE ids across networking, storage, NFS, tracing, and io_uring, with no exploitation status.
Ubuntu releases fixes for critical Linux kernel RCE vulnerability
CVE-2026-98432 use-after-free in IPv4 TCP handling fixed in proposed updates for Ubuntu 22.04 and newer.
1
Ubuntu Releases Early Fixes for Linux Kernel RCE Flaw
Ubuntu provides early kernel fixes for CVE-2026-98432 allowing root RCE via use-after-free in TCP connections; attackers scanning in the wild for affected systems.
1
Linux Kernel Vulnerability Allows Unprivileged Root Access
The flaw in the virt_wifi driver enables unprivileged local privilege escalation to root on default Fedora 44 Server.
3
Ubuntu LTS kernels lack patch for critical CVE-2026-98432
No fixed kernels released for Ubuntu 22.04, 24.04 or 26.04 despite CVSS 9.8 rating for CVE-2026-98432, leaving systems exposed for nearly three weeks.
Linux kernel TCP UAF CVE-2026-98432 rated Critical
Anthropic researcher reported a PoC for remote root access on Linux servers with multipath TCP listeners.
3
Linux kernel TCP flaw CVE-2026-98432 allows remote root on MPTCP servers
Anthropic says an unreleased Claude model built a root exploit in about 53 minutes; no in-the-wild attacks are confirmed.
2
Go team warns CVE-2026-98432 can give RCE via MPTCP
Since Go 1.24, Linux listen sockets enable MPTCP by default; turning it off is only a fragile stopgap.