Vulnerabilities
Researchers Flag 11 Old Microsoft-Signed Linux UEFI Shims That Could Bypass Secure Boot
Eleven old Microsoft-signed shims land as bypasses of Secure Boot — Linux-boot defender review this week.
Linux
Researchers Disclose "GhostLock," a 15-Year-Old Linux Flaw Enabling Root and Container Escape
Another long-standing Linux finding lands with defender-team implications across distributions and container platforms.
Vulnerabilities
Google Awards $250,000 Bounty for Linux KVM Guest-to-Host Escape
A significant Google bounty award draws attention to a Linux virtualization finding — defender review continues this week.
Linux
16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host on Intel and AMD x86
A long-standing KVM finding lands with cloud-provider implications — defender posture review this week.
Linux
Researchers Publish "pedit COW" Linux Disclosure (CVE-2026-46331)
Researchers detailed pedit COW, CVE-2026-46331, a Linux kernel privilege-escalation flaw in the act_pedit traffic-control action — a second Linux disclosure in the same weekend as DirtyClone, with distribution patch tracking continuing.
Linux
Researchers Publish "DirtyClone" Linux Kernel Disclosure (CVE-2026-43503)
Another Linux kernel research disclosure — distribution patch tracking work for the week. JFrog published a working exploit for DirtyClone, a local privilege escalation to root in the kernel networking stack, fixed upstream in late May.
Vulnerabilities
Approaching Deadline for Windows and Linux Secure Boot Key Updates
A lifecycle deadline that requires defender coordination with hardware vendors, as Microsoft's 2011-era Secure Boot certificates begin expiring across Windows and Linux environments.
Vulnerabilities
Pack2TheRoot: CVE-2026-41651 Turns Local Linux Access Into Root
A dormant TOCTOU race in PackageKit — the daemon almost every Linux distro ships — lets any local user poison a transaction and install a root-owned package with no password. It hid for 12 years, and a public exploit is already out.