A critical use-after-free vulnerability within the Linux kernel's AF_UNIX socket subsystem has been exploited, enabling attackers to escape containerized environments and achieve root-level privileges on the host system. Security firm DepthFirst disclosed this finding in research published on September 22…
Reports mentioning Linux
A significant vulnerability has been identified within the Linux kernel's Kernel-based Virtual Machine (KVM) virtualization code, specifically impacting ARM64 processors. This flaw, officially designated as CVE-2026-89775, creates a security risk by exposing a freed piece of host memory…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) announced on Friday, October 25, 2024, the addition of three security vulnerabilities affecting the Linux kernel to its catalog of Known Exploited Vulnerabilities (KEV).
A China-nexus cyber espionage actor, identified as Fire Ant, has broadened its operational scope to include the compromise of Cisco IOS XR routers, according to an investigation by incident response firm Sygnia.
A critical use-after-free vulnerability within the Linux kernel's Stream Control Transmission Protocol (SCTP) networking code, present since 2008, has been identified and exploited to grant local users full root privileges on a host system.
A critical Linux kernel vulnerability, dubbed Zapscape, has been identified, posing a significant security risk by allowing privileged code within an L1 guest virtual machine (VM) to break free from KVM isolation and execute arbitrary commands on the host system.
Researchers from MIT's Computer Science and Artificial Intelligence Laboratory (CSAIL) have identified a novel security vulnerability, dubbed INTERRUPT INJECTION, capable of circumventing Spectre v2 defenses on processors manufactured by both Intel and AMD.
Nebula Security researchers have disclosed GhostLock (CVE-2026-43499), a 15-year-old vulnerability within the Linux kernel that allows any authenticated user to achieve full root control over unpatched systems. This critical flaw, which has been present by default in nearly all major…
A critical use-after-free vulnerability has been discovered in Linux's Kernel-based Virtual Machine (KVM) hypervisor, allowing guest virtual machines to escape to the host system. This flaw, dubbed 'Januscape' and assigned CVE-2026-53359, has reportedly existed for 16 years and affects both…