Linux
Researchers Disclose "GhostLock," a 15-Year-Old Linux Flaw Enabling Root and Container Escape
Another long-standing Linux finding lands with defender-team implications across distributions and container platforms.
Vulnerabilities
Google Awards $250,000 Bounty for Linux KVM Guest-to-Host Escape
A significant Google bounty award draws attention to a Linux virtualization finding — defender review continues this week.
Linux
16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host on Intel and AMD x86
A long-standing KVM finding lands with cloud-provider implications — defender posture review this week.
Linux
Researchers Publish "pedit COW" Linux Disclosure (CVE-2026-46331)
Researchers detailed pedit COW, CVE-2026-46331, a Linux kernel privilege-escalation flaw in the act_pedit traffic-control action — a second Linux disclosure in the same weekend as DirtyClone, with distribution patch tracking continuing.
Linux
Researchers Publish "DirtyClone" Linux Kernel Disclosure (CVE-2026-43503)
Another Linux kernel research disclosure — distribution patch tracking work for the week. JFrog published a working exploit for DirtyClone, a local privilege escalation to root in the kernel networking stack, fixed upstream in late May.
Vulnerabilities
Approaching Deadline for Windows and Linux Secure Boot Key Updates
A lifecycle deadline that requires defender coordination with hardware vendors, as Microsoft's 2011-era Secure Boot certificates begin expiring across Windows and Linux environments.
Vulnerabilities
Pack2TheRoot (CVE-2026-41651): Cross-Distro Linux LPE in PackageKit
A 12-year-old TOCTOU bug in the Linux PackageKit daemon, now dubbed Pack2TheRoot (CVE-2026-41651), allows local users to silently install system packages and escalate to full root on many default-install Linux desktops and servers. BONN, GERMANY — Security researchers from Deutsche Telekom’s Red Team have disclosed