Skip to content
Threat Feed
Subscribe

Tag

Kernel-Vulnerability

2 briefs RSS
high advisory

Kernel Local Privilege Escalation Vulnerability CVE-2026-17523

A critical local privilege escalation (LPE) vulnerability, tracked as CVE-2026-17523 and identified as an Expired Pointer Dereference (CWE-825), exists within the kernel, primarily affecting Red Hat Enterprise Linux 8, enabling an unprivileged local user to execute arbitrary code within the kernel, leading to root privileges and full control over the compromised system.

Red Hat Enterprise Linux 8 privilege-escalation kernel-vulnerability linux lpe cve
1t 1c
high advisory

Linux Kernel proc_readdir_de() Use-After-Free Local Privilege Escalation

A local privilege escalation vulnerability exists in the Linux Kernel versions ~3.14+ through 6.18-rc5 due to a use-after-free in the proc_readdir_de() function, where a concurrent traversal can dereference a freed entry's fields during network device unregistration, leading to privilege escalation via modprobe_path overwrite.

Linux Kernel local-privilege-escalation kernel-vulnerability use-after-free linux
2r 1t 1c