Skip to main content
Apexward Pulse
3 reportsPriority Medium

Linux Kernel vulnerability disclosures

Multiple vulnerabilities have been disclosed in the Linux kernel, with some reported to be exploited in the wild, posing risks to system security and stability for UK organisations.

First report Latest

What is going on

  • A time-of-check time-of-use (TOCTOU) race condition vulnerability was disclosed in the Linux kernel with high impact on confidentiality, integrity, and availability.
  • A heap out-of-bounds write vulnerability was reported in the Linux kernel that could allow privilege escalation or denial of service through user namespace exploitation.
  • An integer overflow vulnerability in the create_elf_tables() function was disclosed, potentially allowing unprivileged local users to exploit SUID binaries.
  • The vulnerabilities have been added to the CISA Known Exploited Vulnerabilities catalogue, indicating active exploitation in the wild.
  • What to watch: Further details on the exploitation methods and affected distributions could change the understanding of the risk level.

Reports in this story

Newest first. Each one is a separate event with its own sources and evidence.

Back to the feed