As cited
Copy frozen at (site build).
vulnerabilities
NCSC-2026-0461 Vulnerabilities Fixed in Linux Kernel
Linux kernel received patches for two vulnerabilities in the IPv4 TCP stack and networking subsystem. The first is a race condition causing use-after-free of socket options during concurrent TCP operations, potentially leading to system instability or memory corruption. The second involves improper checksum validation in IPv4 packets, known as PwnEscape, enabling local attackers or untrusted guest virtual machines to execute arbitrary code on the host, crash the system, or leak sensitive information.
Why it matters: Linux system administrators and cloud providers hosting virtual machines must apply patches to the Linux kernel to prevent remote exploitation of the TCP stack and guest-to-host escape attacks that could compromise system stability and security without requiring authentication.
- Source published
- First seen by Cybersecurity Tracker