[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"public-config":3,"i-flag:ph-4x3":14,"i-flag:us-4x3":19,"i-flag:de-4x3":21,"i-flag:hk-4x3":23,"i-tabler:lifebuoy":25,"i-tabler:timeline":28,"i-tabler:apps":30,"i-tabler:package":32,"i-tabler:circle-half-2":34,"i-tabler:sun":36,"i-tabler:moon":38,"i-tabler:menu-2":40,"i-tabler:user":42,"i-tabler:notebook":44,"i-simple-icons:forgejo":46,"i-tabler:shield-lock":48,"i-tabler:tools":50,"i-tabler:calendar":52,"i-tabler:x":54,"$f12xgb4uqnukmi":56,"i-tabler:arrow-left":122,"i-tabler:tag":124},{"matomo":4,"booking":7,"site":9,"blog":11,"newsletter":12},{"enabled":5,"siteId":6},true,"7",{"enabled":5,"url":8},"https:\u002F\u002Fcal.com\u002Fjdbungart",{"url":10},"https:\u002F\u002Fjdneer.com",{"enabled":5},{"enabled":13},false,{"left":15,"top":15,"width":16,"height":17,"rotate":15,"vFlip":13,"hFlip":13,"body":18},0,640,480,"\u003Cpath fill=\"#0038a8\" d=\"M0 0h640v240H0z\"\u002F>\u003Cpath fill=\"#ce1126\" d=\"M0 240h640v240H0z\"\u002F>\u003Cpath fill=\"#fff\" d=\"M415.7 240L0 480V0\"\u002F>\u003Cpath fill=\"#fcd116\" d=\"M26.7 42.4L41 55l16.6-9.2l-7.4 17.5l14 13l-19-1.6l-8.1 17.2l-4.3-18.5L14 71l16.3-10zm323.8 172.3l.4 19l18 6.3l-18 6.2l-.4 19l-11.5-15.1l-18.2 5.5l10.8-15.6l-10.8-15.6l18.2 5.5zM37.2 388.1l8 17.2l19-1.6l-13.9 13l7.4 17.5l-16.6-9.1l-14.4 12.4l3.6-18.7L14 409l18.9-2.4zm114.2-249l-6.2 6.2l3.1 47l-3 .3l-5.7-42.9l-5.1 5l7.6 38.4a48 48 0 0 0-17.2 7.1l-21.7-32.4H96l26.4 34.3l-2.4 2l-31.1-35.5h-8.8v8.8l35.4 31l-2 2.5l-34.3-26.3v7.1l32.5 21.7q-5.2 7.8-7.1 17.2L66.3 223l-5.1 5l42.9 5.7q-.3 1.6-.3 3.1l-47-3l-6.2 6.2l6.2 6.2l47-3.1l.3 3.1l-42.9 5.7l5 5l38.4-7.6a48 48 0 0 0 7.1 17.2l-32.5 21.7v7.2l34.3-26.3l2 2.4l-35.4 31v8.8H89l31-35.4l2.5 2L96 312.2h7.2l21.7-32.5q7.8 5.2 17.2 7.1l-7.6 38.4l5 5l5.7-42.9q1.5.3 3.1.3l-3 47l6.1 6.2l6.3-6.2l-3.1-47l3-.3l5.7 43l5.1-5.1l-7.6-38.4a48 48 0 0 0 17.2-7.1l21.7 32.5h7.2l-26.4-34.3l2.4-2l31.1 35.4h8.8v-8.8l-35.4-31l2-2.4l34.3 26.3v-7.2l-32.5-21.7q5.2-7.8 7.1-17.2l38.3 7.6l5.1-5l-42.9-5.7q.3-1.5.3-3.1l47 3l6.2-6.1l-6.2-6.2l-47 3l-.3-3l42.9-5.7l-5-5l-38.4 7.5a48 48 0 0 0-7.1-17.2l32.5-21.7v-7.1l-34.3 26.3l-2-2.4l35.4-31v-8.9H214l-31 35.5l-2.5-2l26.4-34.3h-7.2L178 200.2q-7.8-5.2-17.2-7.1l7.6-38.3l-5-5l-5.7 42.8l-3.1-.3l3-47z\"\u002F>",{"left":15,"top":15,"width":16,"height":17,"rotate":15,"vFlip":13,"hFlip":13,"body":20},"\u003Cpath fill=\"#bd3d44\" d=\"M0 0h640v480H0\"\u002F>\u003Cpath stroke=\"#fff\" stroke-width=\"37\" d=\"M0 55.3h640M0 129h640M0 203h640M0 277h640M0 351h640M0 425h640\"\u002F>\u003Cpath fill=\"#192f5d\" d=\"M0 0h364.8v258.5H0\"\u002F>\u003Cmarker id=\"SVGEq3dreKJ\" markerHeight=\"30\" markerWidth=\"30\">\u003Cpath fill=\"#fff\" d=\"m14 0l9 27L0 10h28L5 27z\"\u002F>\u003C\u002Fmarker>\u003Cpath fill=\"none\" marker-mid=\"url(#SVGEq3dreKJ)\" d=\"m0 0l16 11h61h61h61h61h60L47 37h61h61h60h61L16 63h61h61h61h61h60L47 89h61h61h60h61L16 115h61h61h61h61h60L47 141h61h61h60h61L16 166h61h61h61h61h60L47 192h61h61h60h61L16 218h61h61h61h61h60z\"\u002F>",{"left":15,"top":15,"width":16,"height":17,"rotate":15,"vFlip":13,"hFlip":13,"body":22},"\u003Cpath fill=\"#fc0\" d=\"M0 320h640v160H0z\"\u002F>\u003Cpath fill=\"#000001\" d=\"M0 0h640v160H0z\"\u002F>\u003Cpath fill=\"red\" d=\"M0 160h640v160H0z\"\u002F>",{"left":15,"top":15,"width":16,"height":17,"rotate":15,"vFlip":13,"hFlip":13,"body":24},"\u003Cpath fill=\"#ec1b2e\" d=\"M0 0h640v480H0\"\u002F>\u003Cpath id=\"SVG5tfvBPpj\" fill=\"#fff\" d=\"M346.3 103.1C267 98 230.6 201.9 305.6 240.3c-26-22.4-20.6-55.3-10.1-72.4l1.9 1.1c-13.8 23.5-11.2 52.7 11.1 71c-12.7-12.3-9.5-39 12.1-48.9s23.6-39.3 16.4-49.1q-14.7-25.6 9.3-38.9M307.9 164l-4.7 7.4l-1.8-8.6l-8.6-2.3l7.8-4.3l-.6-8.9l6.5 6.1l8.3-3.3l-3.7 8.1l5.6 6.8z\"\u002F>\u003Cuse href=\"#SVG5tfvBPpj\" transform=\"rotate(72 312.5 243.5)\"\u002F>\u003Cuse href=\"#SVG5tfvBPpj\" transform=\"rotate(144 312.5 243.5)\"\u002F>\u003Cuse href=\"#SVG5tfvBPpj\" transform=\"rotate(216 312.5 243.5)\"\u002F>\u003Cuse href=\"#SVG5tfvBPpj\" transform=\"rotate(288 312.5 243.5)\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":27},24,"\u003Cg fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\">\u003Cpath d=\"M8 12a4 4 0 1 0 8 0a4 4 0 1 0-8 0\"\u002F>\u003Cpath d=\"M3 12a9 9 0 1 0 18 0a9 9 0 1 0-18 0m12 3l3.35 3.35M9 15l-3.35 3.35m0-12.7L9 9m9.35-3.35L15 9\"\u002F>\u003C\u002Fg>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":29},"\u003Cg fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\">\u003Cpath d=\"m4 16l6-7l5 5l5-6\"\u002F>\u003Cpath d=\"M14 14a1 1 0 1 0 2 0a1 1 0 1 0-2 0M9 9a1 1 0 1 0 2 0a1 1 0 1 0-2 0m-6 7a1 1 0 1 0 2 0a1 1 0 1 0-2 0m16-8a1 1 0 1 0 2 0a1 1 0 1 0-2 0\"\u002F>\u003C\u002Fg>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":31},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M4 5a1 1 0 0 1 1-1h4a1 1 0 0 1 1 1v4a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1zm0 10a1 1 0 0 1 1-1h4a1 1 0 0 1 1 1v4a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1zm10 0a1 1 0 0 1 1-1h4a1 1 0 0 1 1 1v4a1 1 0 0 1-1 1h-4a1 1 0 0 1-1-1zm0-8h6m-3-3v6\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":33},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"m12 3l8 4.5v9L12 21l-8-4.5v-9zm0 9l8-4.5M12 12v9m0-9L4 7.5m12-2.25l-8 4.5\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":35},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M3 12a9 9 0 1 0 18 0a9 9 0 1 0-18 0m9-9v18m0-7l7-7m-7 12l8.5-8.5M12 9l4.5-4.5\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":37},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M8 12a4 4 0 1 0 8 0a4 4 0 1 0-8 0m-5 0h1m8-9v1m8 8h1m-9 8v1M5.6 5.6l.7.7m12.1-.7l-.7.7m0 11.4l.7.7m-12.1-.7l-.7.7\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":39},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M12 3h.393a7.5 7.5 0 0 0 7.92 12.446A9 9 0 1 1 12 2.992z\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":41},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M4 6h16M4 12h16M4 18h16\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":43},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M8 7a4 4 0 1 0 8 0a4 4 0 0 0-8 0M6 21v-2a4 4 0 0 1 4-4h4a4 4 0 0 1 4 4v2\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":45},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M6 4h11a2 2 0 0 1 2 2v12a2 2 0 0 1-2 2H6a1 1 0 0 1-1-1V5a1 1 0 0 1 1-1m3 0v18m4-14h2m-2 4h2\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":47},"\u003Cpath fill=\"currentColor\" d=\"M16.777 0a2.9 2.9 0 1 1-2.529 4.322H12.91a4.266 4.266 0 0 0-4.265 4.195v2.118a7.08 7.08 0 0 1 4.147-1.42l.118-.002h1.338a2.9 2.9 0 0 1 5.43 1.422a2.9 2.9 0 0 1-5.43 1.422H12.91a4.266 4.266 0 0 0-4.265 4.195v2.319A2.9 2.9 0 0 1 7.222 24A2.9 2.9 0 0 1 5.8 18.57V8.589a7.11 7.11 0 0 1 6.991-7.108l.118-.001h1.338A2.9 2.9 0 0 1 16.778 0M7.223 19.905a1.194 1.194 0 1 0 0 2.389a1.194 1.194 0 0 0 0-2.389m9.554-10.464a1.194 1.194 0 1 0 0 2.389a1.194 1.194 0 0 0 0-2.39m0-7.735a1.194 1.194 0 1 0 0 2.389a1.194 1.194 0 0 0 0-2.389\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":49},"\u003Cg fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\">\u003Cpath d=\"M12 3a12 12 0 0 0 8.5 3A12 12 0 0 1 12 21A12 12 0 0 1 3.5 6A12 12 0 0 0 12 3\"\u002F>\u003Cpath d=\"M11 11a1 1 0 1 0 2 0a1 1 0 1 0-2 0m1 1v2.5\"\u002F>\u003C\u002Fg>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":51},"\u003Cg fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\">\u003Cpath d=\"M3 21h4L20 8a1.5 1.5 0 0 0-4-4L3 17zM14.5 5.5l4 4\"\u002F>\u003Cpath d=\"M12 8L7 3L3 7l5 5M7 8L5.5 9.5M16 12l5 5l-4 4l-5-5m4 1l-1.5 1.5\"\u002F>\u003C\u002Fg>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":53},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M4 7a2 2 0 0 1 2-2h12a2 2 0 0 1 2 2v12a2 2 0 0 1-2 2H6a2 2 0 0 1-2-2zm12-4v4M8 3v4m-4 4h16m-9 4h1m0 0v3\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":55},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M18 6L6 18M6 6l12 12\"\u002F>",{"slug":57,"title":58,"excerpt":59,"image":60,"publishedAt":61,"topics":62,"readMinutes":69,"html":70,"metaTitle":58,"metaDescription":71,"shareImage":72,"updatedAt":76,"author":77,"related":80},"infinity-core-six-linux-kernel-bugs-let-local-users-become-root-and-fixes-are-still-rolling-out","Infinity Core: Six Linux Kernel Bugs Let Local Users Become Root, and Fixes Are Still Rolling Out","Researcher Hyunwoo Kim has disclosed Infinity Core, six bugs in core Linux kernel code. Five let an unprivileged local user gain root or escape a container, and exploit code is public. Fedora and Debian trixie have fixes; Ubuntu, RHEL and Debian bookworm are still waiting.","\u002Fcontent\u002Fimages\u002F2026\u002F10\u002Finfinity_core_adv.png","2026-10-17T10:47:37.000+08:00",[63,66],{"key":64,"label":65},"advisories","Advisories",{"key":67,"label":68},"security","Security",5,"\u003Cp>Security researcher Hyunwoo Kim has published \"Infinity Core\", a set of six Linux kernel vulnerabilities in some of the kernel's most central code: the timer, signal, memory management, futex, scheduler and SLAB allocator subsystems. Kim posted the report to the \u003Ca href=\"https:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2026\u002F10\u002F16\u002F36?ref=ghost.jdneer.com\">oss-security mailing list\u003C\u002Fa> on October 16, 2026, once the embargo agreed with Linux distribution maintainers had expired. According to the report, five of the bugs let an unprivileged local user gain root, and they can also be used to escape containers. The sixth crashes the kernel.\u003C\u002Fp>\u003Cp>All six require the ability to run code on the machine, so none can be exploited remotely on its own. That still matters a great deal for shared servers, CI runners, hosting platforms and container hosts, where untrusted code running as an ordinary user is part of normal life. Working proof-of-concept code is public: Kim's \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FV4bel\u002FInfinityCore?ref=ghost.jdneer.com\">InfinityCore repository on GitHub\u003C\u002Fa> describes exploits that open a root shell from an unprivileged account on a stock Ubuntu 26.04 kernel and on Arch Linux. As of October 16, none of the CVEs appear in CISA's \u003Ca href=\"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?ref=ghost.jdneer.com\">Known Exploited Vulnerabilities catalog\u003C\u002Fa>.\u003C\u002Fp>\u003Cp>The widest-reaching bug is \u003Ca href=\"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-98260&ref=ghost.jdneer.com\">CVE-2026-98260\u003C\u002Fa>, a use-after-free in POSIX CPU timer cleanup when a non-leader thread's exec() fails. It affects kernels from 5.7 onward. The kernel CNA rates it CVSS 7.8. Kim's write-up says the same bug can also be used to gain full root on a Samsung Galaxy S26 Ultra from an ordinary app, and that the Android exploit will be held back until Samsung ships a fix. The other bugs reach fewer kernels: \u003Ca href=\"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-98256&ref=ghost.jdneer.com\">CVE-2026-98256\u003C\u002Fa> (signal queue use-after-free) arrived in 6.15, \u003Ca href=\"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-80775&ref=ghost.jdneer.com\">CVE-2026-80775\u003C\u002Fa> (futex private hash) in 6.17, \u003Ca href=\"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-89754&ref=ghost.jdneer.com\">CVE-2026-89754\u003C\u002Fa> (an out-of-bounds write through mincore()) in 7.0, and \u003Ca href=\"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-98385&ref=ghost.jdneer.com\">CVE-2026-98385\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-97941&ref=ghost.jdneer.com\">CVE-2026-97941\u003C\u002Fa> only in the 7.2 series. The scheduler bug is also only reachable when \u003Ccode>CONFIG_SCHED_CACHE\u003C\u002Fcode> is enabled, the feature is switched on at runtime, and the machine has more than one last-level cache. For the SLAB bug, the public trigger causes a kernel panic, and Kim notes that a privilege escalation chain has not been written yet, although the kernel CNA still scores it 7.8 as a memory corruption.\u003C\u002Fp>\n\n\u003Ctable>\u003Ctbody>\u003Ctr>\u003Cth>CVE\u003C\u002Fth>\u003Cth>Subsystem\u003C\u002Fth>\u003Cth>Impact\u003C\u002Fth>\u003Cth>Affected\u003C\u002Fth>\u003Cth>Fixed in\u003C\u002Fth>\u003C\u002Ftr>\u003Ctr>\u003Ctd>\u003Ca href=\"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-98260&ref=ghost.jdneer.com\">CVE-2026-98260\u003C\u002Fa>\u003C\u002Ftd>\u003Ctd>Timer\u003C\u002Ftd>\u003Ctd>Root (LPE)\u003C\u002Ftd>\u003Ctd>5.7+\u003C\u002Ftd>\u003Ctd>6.6.158, 6.12.112,\u003Cbr \u002F>6.18.54, 7.2.8\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd>\u003Ca href=\"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-98256&ref=ghost.jdneer.com\">CVE-2026-98256\u003C\u002Fa>\u003C\u002Ftd>\u003Ctd>Signal\u003C\u002Ftd>\u003Ctd>Root (LPE)\u003C\u002Ftd>\u003Ctd>6.15+\u003C\u002Ftd>\u003Ctd>6.18.54, 7.2.8\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd>\u003Ca href=\"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-89754&ref=ghost.jdneer.com\">CVE-2026-89754\u003C\u002Fa>\u003C\u002Ftd>\u003Ctd>MM\u003C\u002Ftd>\u003Ctd>Root (LPE)\u003C\u002Ftd>\u003Ctd>7.0+\u003C\u002Ftd>\u003Ctd>6.18.50, 7.2.4\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd>\u003Ca href=\"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-80775&ref=ghost.jdneer.com\">CVE-2026-80775\u003C\u002Fa>\u003C\u002Ftd>\u003Ctd>Futex\u003C\u002Ftd>\u003Ctd>Root (LPE)\u003C\u002Ftd>\u003Ctd>6.17+\u003C\u002Ftd>\u003Ctd>6.18.47, 7.1.11, 7.2.1\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd>\u003Ca href=\"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-98385&ref=ghost.jdneer.com\">CVE-2026-98385\u003C\u002Fa>\u003C\u002Ftd>\u003Ctd>Scheduler\u003C\u002Ftd>\u003Ctd>Root (LPE)\u003C\u002Ftd>\u003Ctd>7.2\u003C\u002Ftd>\u003Ctd>7.2.9\u003C\u002Ftd>\u003C\u002Ftr>\u003Ctr>\u003Ctd>\u003Ca href=\"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-97941&ref=ghost.jdneer.com\">CVE-2026-97941\u003C\u002Fa>\u003C\u002Ftd>\u003Ctd>SLAB\u003C\u002Ftd>\u003Ctd>Kernel panic (PoC)\u003C\u002Ftd>\u003Ctd>7.2\u003C\u002Ftd>\u003Ctd>7.2.7\u003C\u002Ftd>\u003C\u002Ftr>\u003C\u002Ftbody>\u003C\u002Ftable>\n\n\u003Cp>\"Root (LPE)\" means local privilege escalation to root, which the researcher says also enables container escape. Affected and fixed versions come from the kernel CNA's CVE records on CVE.org. Every bug is also fixed in the 7.3 release candidates.\u003C\u002Fp>\u003Ch2 id=\"where-the-distributions-stand\">Where the distributions stand\u003C\u002Fh2>\u003Cp>\u003Cem>Updated Oct 18, 2026: Debian has shipped the bookworm fix (linux 6.1.190-1, DLA-4841-1), and Ubuntu now lists fixes for 24.04 LTS and 26.04 LTS as pending. Regular RHEL 9 and RHEL 10 still have no fixed kernel.\u003C\u002Fem>\u003C\u002Fp>\u003Cp>Status as checked on the evening of October 18, 2026 (Manila time):\u003C\u002Fp>\u003Cul>\u003Cli>\u003Cstrong>Debian:\u003C\u002Fstrong> trixie is fixed in linux 6.12.113-1 (\u003Ca href=\"https:\u002F\u002Fsecurity-tracker.debian.org\u002Ftracker\u002FDSA-6568-1?ref=ghost.jdneer.com\">DSA-6568-1\u003C\u002Fa>). Bookworm is only affected by CVE-2026-98260, and that is now fixed in linux 6.1.190-1, released through Debian LTS as \u003Ca href=\"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F10\u002Fmsg00035.html?ref=ghost.jdneer.com\">DLA-4841-1\u003C\u002Fa> late on October 17 (Manila time) (\u003Ca href=\"https:\u002F\u002Fsecurity-tracker.debian.org\u002Ftracker\u002FCVE-2026-98260?ref=ghost.jdneer.com\">Debian tracker\u003C\u002Fa>). Debian marks the other five as not affecting either release.\u003C\u002Fli>\u003Cli>\u003Cstrong>Ubuntu:\u003C\u002Fstrong> CVE-2026-98260 is now marked \"pending\" for 24.04 LTS and 26.04 LTS, meaning a fix is being prepared but not yet released, and is still \"needed\" for 22.04 LTS. No fixed package is out for any of them yet (\u003Ca href=\"https:\u002F\u002Fubuntu.com\u002Fsecurity\u002FCVE-2026-98260?ref=ghost.jdneer.com\">Ubuntu CVE page\u003C\u002Fa>). CVE-2026-89754 and CVE-2026-80775 are \"pending\" for 26.04.\u003C\u002Fli>\u003Cli>\u003Cstrong>Red Hat Enterprise Linux:\u003C\u002Fstrong> Red Hat rates CVE-2026-98260 Important and lists RHEL 9 and RHEL 10 as affected. So far, fixes have shipped only for some Extended Update Support and SAP streams, such as RHEL 10.0 EUS (RHSA-2026:83707) and RHEL 9.6 EUS (RHSA-2026:83775) (\u003Ca href=\"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-98260?ref=ghost.jdneer.com\">Red Hat CVE page\u003C\u002Fa>). CVE-2026-98256 and CVE-2026-80775 also affect RHEL 10. CVE-2026-80775 was fixed for RHEL 9 in RHSA-2026:74438.\u003C\u002Fli>\u003Cli>\u003Cstrong>Fedora:\u003C\u002Fstrong> kernel 7.2.10, stable for Fedora 43 and 44 since October 14, already includes every upstream fix, and 7.2.11 is now stable on Fedora 43, 44 and 45 (\u003Ca href=\"https:\u002F\u002Fbodhi.fedoraproject.org\u002Fupdates\u002F?search=kernel-7.2&ref=ghost.jdneer.com\">Bodhi\u003C\u002Fa>).\u003C\u002Fli>\u003Cli>\u003Cstrong>Proxmox VE 9:\u003C\u002Fstrong> proxmox-kernel 7.0.14-20 moved to Ubuntu's 7.0.0-39.39 kernel source, which carries the mincore fix for CVE-2026-89754 and the futex fix for CVE-2026-80775 (\u003Ca href=\"https:\u002F\u002Fchangelogs.ubuntu.com\u002Fchangelogs\u002Fpool\u002Fmain\u002Fl\u002Flinux\u002Flinux_7.0.0-39.39\u002Fchangelog?ref=ghost.jdneer.com\">Ubuntu changelog\u003C\u002Fa>). The timer and signal fixes for CVE-2026-98260 and CVE-2026-98256 followed in 7.0.14-21, so 7.0.14-21 and later include all four (\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fproxmox\u002Fpve-kernel\u002Fblob\u002Fmaster\u002Fdebian\u002Fchangelog?ref=ghost.jdneer.com\">Proxmox changelog\u003C\u002Fa>). The current build is 7.0.14-24. CVE-2026-98385 and CVE-2026-97941 only exist in 7.2 kernels and do not apply to Proxmox's 7.0 kernel.\u003C\u002Fli>\u003Cli>\u003Cstrong>Proxmox VE 8:\u003C\u002Fstrong> the latest proxmox-kernel-6.8 build, 6.8.12-43, dates from August 20, before the CVE-2026-98260 fix, so PVE 8 hosts remain exposed to that bug.\u003C\u002Fli>\u003C\u002Ful>\u003Ch2 id=\"are-you-affected\">Are you affected?\u003C\u002Fh2>\u003Cul>\u003Cli>☐ Run \u003Ccode>uname -r\u003C\u002Fcode>. If the running kernel is 5.7 or later and older than the fixed build for your distribution, you are exposed to at least CVE-2026-98260.\u003C\u002Fli>\u003Cli>☐ On Debian, run \u003Ccode>apt policy linux-image-amd64\u003C\u002Fcode>; on Ubuntu, \u003Ccode>apt policy linux-image-generic\u003C\u002Fcode>. Compare the installed version with the fixed version on the Debian or Ubuntu tracker. On bookworm, anything older than 6.1.190-1 needs updating. Current Ubuntu kernels have no fix yet.\u003C\u002Fli>\u003Cli>☐ On RHEL, Rocky, AlmaLinux or Fedora, run \u003Ccode>rpm -q kernel\u003C\u002Fcode>. On Fedora, anything older than 7.2.10 needs updating. On RHEL, compare against the fixed kernel in the RHSA for your stream, if one exists yet.\u003C\u002Fli>\u003Cli>☐ On Proxmox VE, run \u003Ccode>pveversion -v\u003C\u002Fcode> and look at the running kernel line. A 6.8 kernel (PVE 8) is exposed. On PVE 9, a 7.0 kernel older than 7.0.14-21 is missing fixes.\u003C\u002Fli>\u003Cli>☐ If \u003Ccode>uname -r\u003C\u002Fcode> shows an older kernel than the newest one installed, the fix is on disk but not running yet. Reboot.\u003C\u002Fli>\u003Cli>☐ On 7.2 kernels, run \u003Ccode>grep CONFIG_SCHED_CACHE \u002Fboot\u002Fconfig-$(uname -r)\u003C\u002Fcode>. \u003Ccode>CONFIG_SCHED_CACHE=y\u003C\u002Fcode> means the scheduler bug, CVE-2026-98385, may be reachable. Kernels older than 7.2, including 7.0, are not affected by it or by CVE-2026-97941.\u003C\u002Fli>\u003Cli>☐ If \u003Ccode>CONFIG_SCHED_CACHE=y\u003C\u002Fcode> is set, check whether scheduler cache is switched on at runtime. Kim's write-up says the bug is only reachable when the kernel's \u003Ccode>sysctl_sched_cache_user\u003C\u002Fcode> setting is nonzero and the CPU topology has more than one last-level cache. \u003Ccode>ls \u002Fproc\u002Fsys\u002Fkernel | grep sched_cache\u003C\u002Fcode> shows which scheduler cache controls your kernel exposes.\u003C\u002Fli>\u003Cli>☐ Ask who can run code on the box: shell users you do not fully trust, CI jobs, shared hosting accounts, or containers (for example \u003Ccode>docker ps\u003C\u002Fcode> or \u003Ccode>pct list\u003C\u002Fcode>). Containers share the host kernel, so any of these makes the host a priority. Virtual machines run their own kernel, so patch each guest too.\u003C\u002Fli>\u003C\u002Ful>\u003Ch2 id=\"what-to-do\">What to do\u003C\u002Fh2>\u003Cp>Install your distribution's fixed kernel as soon as it is available and reboot, since a new kernel package does nothing until the machine boots into it. Neither the researcher nor the CVE records document a workaround. Kim's write-up says the collection deliberately excludes bugs that need user namespaces, so disabling unprivileged user namespaces will not block these. Where a fix has not landed yet, the practical step is to limit who can run code on exposed machines, and to put multi-tenant and container hosts at the front of the queue once patches arrive.\u003C\u002Fp>\u003Cp>Sources: Hyunwoo Kim's \u003Ca href=\"https:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2026\u002F10\u002F16\u002F36?ref=ghost.jdneer.com\">oss-security report\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FV4bel\u002FInfinityCore?ref=ghost.jdneer.com\">InfinityCore repository\u003C\u002Fa>, the kernel CNA's CVE records on \u003Ca href=\"https:\u002F\u002Fwww.cve.org\u002F?ref=ghost.jdneer.com\">CVE.org\u003C\u002Fa>, the Debian security tracker, Ubuntu's CVE tracker, Red Hat's CVE pages, Fedora Bodhi, Proxmox's kernel changelogs, and CISA's KEV catalog.\u003C\u002Fp>","Researcher Hyunwoo Kim has disclosed Infinity Core, six bugs in core Linux kernel code. Five let an unprivileged local user gain root or escape a...",{"src":60,"width":73,"height":74,"type":75},1600,900,"image\u002Fpng","2026-10-18T18:06:30.000+08:00",{"name":78,"url":79,"owner":13},"Aiko Tanaka",null,[81,91,102,113],{"slug":82,"title":83,"excerpt":84,"image":85,"publishedAt":86,"topics":87,"readMinutes":90},"http2shell-cve-2026-111497-brotli-decoder","HTTP2Shell (CVE-2026-111497): What the Brotli Decoder Bug Really Hits, and How to Patch","CVE-2026-111497 is an out-of-bounds write in Google's Brotli decoder, 1.0.3 through 1.2.0. Fixed in 1.0.10, 1.1.1 and 1.2.1, plus Node.js, Bun, Python, Envoy and .NET updates. You are exposed if you decode untrusted Brotli data. Not in CISA KEV.","\u002Fcontent\u002Fimages\u002F2026\u002F10\u002Fhttp2shell_cve_2026_111497_v2.png","2026-10-26T20:51:27.000+08:00",[88,89],{"key":64,"label":65},{"key":67,"label":68},1,{"slug":92,"title":93,"excerpt":94,"image":95,"publishedAt":96,"topics":97,"readMinutes":90},"package-cooldowns-github-package-firewall-npm-pnpm-bun-pip-uv-poetry","Package Cooldowns Compared: GitHub Package Firewall vs. What npm, pnpm, Yarn, Bun, pip, uv and Poetry Already Do","GitHub now offers an install-time firewall for npm, free in preview and metered later. Most package managers already ship a free cooldown. Here is what each tool does, the copy-paste config, and where cooldowns stop helping.","\u002Fcontent\u002Fimages\u002F2026\u002F10\u002Fpkg-cooldowns-conveyor-alberto-rodriguez-unsplash.jpg","2026-10-26T14:00:00.000+08:00",[98,101],{"key":99,"label":100},"guides","Guides",{"key":67,"label":68},{"slug":103,"title":104,"excerpt":105,"image":106,"publishedAt":107,"topics":108,"readMinutes":90},"tailscale-ssh-tailworm-mesh-vpn-agent-risk","Your Mesh VPN Agent Is Root on Every Box. Tailworm Is the Reminder.","A researcher showed one hacked Tailscale node reaching root on other servers through Tailscale SSH forwarding. No patch yet. Here is why mesh VPN agents deserve the same suspicion as any privileged daemon.","\u002Fcontent\u002Fimages\u002F2026\u002F10\u002Ftailworm-padlock-light-trails-flyd-unsplash.jpg","2026-10-26T12:00:00.000+08:00",[109,112],{"key":110,"label":111},"opinion","Opinion",{"key":67,"label":68},{"slug":114,"title":115,"excerpt":116,"image":117,"publishedAt":118,"topics":119,"readMinutes":90},"emudhra-ca-weak-keys-chain-of-trust","eMudhra Broke Almost Nothing, and Still Dented the Chain of Trust","Eight eMudhra intermediate CA keys turned out to be numbers under 256. Browsers blocked them within hours, almost no site broke, and eMudhra is leaving the TLS business. The service impact was tiny. The lesson for the chain of trust is not.","\u002Fcontent\u002Fimages\u002F2026\u002F10\u002Femudhra-keys-iolandino-baiano-unsplash.jpg","2026-10-25T16:00:00.000+08:00",[120,121],{"key":110,"label":111},{"key":67,"label":68},{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":123},"\u003Cpath fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\" d=\"M5 12h14M5 12l6 6m-6-6l6-6\"\u002F>",{"left":15,"top":15,"width":26,"height":26,"rotate":15,"vFlip":13,"hFlip":13,"body":125},"\u003Cg fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"2\">\u003Cpath d=\"M6.5 7.5a1 1 0 1 0 2 0a1 1 0 1 0-2 0\"\u002F>\u003Cpath d=\"M3 6v5.172a2 2 0 0 0 .586 1.414l7.71 7.71a2.41 2.41 0 0 0 3.408 0l5.592-5.592a2.41 2.41 0 0 0 0-3.408l-7.71-7.71A2 2 0 0 0 11.172 3H6a3 3 0 0 0-3 3\"\u002F>\u003C\u002Fg>"]