ThreatVectr
Tag

#linux-kernel

12 stories taggedlinux-kernel.

Photoreal news-editorial 16:9 photograph of a dark server room filled with rows of blinking rack-mounted hardware, cool blue and amber indicator lights reflecti
AI Security

AI Is Spitting Out Working Exploits for $3.61. Microsoft Says the Old Playbook Is Dead.

A senior Microsoft security chief told Black Hat USA that AI tools have made finding and weaponising software flaws so cheap and fast that the entire industry's approach to defence needs to change, starting now.

5 min read
Overhead view of a large server room with rows of illuminated rack-mounted servers bathed in cool blue and orange ambient light, power indicator LEDs glowing in
Vulnerabilities

Zapscape flaw in Linux KVM lets a rogue guest break out to the host

A newly disclosed bug in the Linux kernel's virtualization layer, tracked as CVE-2026-64561, could let an attacker inside a nested virtual machine reach the physical server underneath.

3 min read
An illustration of a network security breach with digital locks and warning symbols
Vulnerabilities

Researchers Sneak Past Spectre v2 by Slipping Between the Kernel's Own Defenses

MIT CSAIL's 'Interrupt Injection' technique re-poisons the branch predictor in the tiny window after the CPU cleans it and before Linux uses it.

4 min read
Photoreal news-editorial shot of a server rack interior, dense bundles of blue and red network cables, one cable glowing faintly amber where it connects to a sw
Vulnerabilities

Linux Kernel Flaw 'OVSwrap' Hands Local Users Root on Around 800 Builds

A memory corruption bug in Open vSwitch, tracked as CVE-2026-64531, lets ordinary users on default Linux systems become administrator, and a working exploit is already public.

4 min read
Full-frame photoreal editorial shot of an open industrial control cabinet inside a substation, showing a ruggedised ethernet switch with blue and green status L
Vulnerabilities

Siemens flags hundreds of Linux flaws in its S7-1500 MFP factory controllers

The firmware inside a widely used industrial controller ships with a Linux subsystem carrying more than 300 unpatched CVEs. Siemens says a fix is coming.

4 min read
Photoreal editorial shot of a dense server rack in a cool-lit data centre, rows of blinking green and amber status LEDs, one rack panel showing a faint red warn
Vulnerabilities

Researcher Publishes Linux Kernel Root Exploit Built With AI Help

CVE-2026-53264, a use-after-free flaw in the kernel's traffic-control code, lets an ordinary Linux user gain full system control on CentOS Stream 9.

4 min read
Photoreal editorial shot of a dense server rack in a cool-lit data centre, rows of blinking green and amber status LEDs, one rack panel showing a faint red warn
Vulnerabilities

16-Year-Old Linux Bug Lets Attackers Escape Virtual Machines on Intel and AMD

Researcher Hyunwoo Kim's 'Januscape' flaw (CVE-2026-53359) sat in KVM for over a decade and threatens shared cloud servers at Google Cloud, AWS and beyond.

4 min read
Full-frame 16:9 photoreal editorial shot of a dense server rack in a dim data centre, cool blue LEDs reflecting off polished floor tiles, one open chassis expos
Vulnerabilities

A 16-Year-Old Flaw in Linux's Virtual Machine Engine Lets Guests Break Into Their Host

Januscape (CVE-2026-53359) sits in shared code used on both Intel and AMD servers, and a public demo already crashes the host machine.

4 min read
Vulnerabilities

Linux act_pedit OOB Write Poisons Page Cache, Hands Local Users Root

CVE-2026-46331 weaponizes a traffic-control bug to overwrite cached binaries. Working PoC dropped a day after disclosure.

2 min read
Vulnerabilities

DirtyClone: New DirtyFrag-Family Kernel Bug Hands Local Users Root

CVE-2026-43503 (CVSS 8.8) corrupts file-backed memory through a cloned skb. A working PoC is now public.

3 min read
Vulnerabilities

Public Exploit Drops for nf_tables UAF: CVE-2026-23111 Gives Local Root, Container Escape

Exodus Intelligence published a full walkthrough four months after the upstream patch. The kernel bug is a one-liner. The exploit is not.

2 min read
Vulnerabilities

CIFSwitch: Linux Kernel Key-Handling Bug Hands Out Root Across Major Distros

A local privilege escalation in the kernel's CIFS authentication path lets an unprivileged user forge key descriptions and walk away with root.

3 min read
© 2026 Threat Vectr