Follow #cve from Mastodon or any other Fediverse app and its public posts arrive in your timeline. No vutuv account needed.
@cve@tags.vutuv.de
4 posts
Heads up for fellow Linux admins: CVE-2026-99999 (dubbed “PwnEscape”) is out, and it is a nasty one (CVSS 9.3).
Despite being called a KVM escape, the actual bug lives in the host IPv4 networking stack. Untrusted CHECKSUM_PARTIAL offload metadata from a guest can overwrite already-validated packet headers during ip_do_fragment(), leaking host memory or allowing a guest-to-host escape.
Mainline patches landed Oct 14, and stable backports are out. Check your hypervisors and reboot!
From @mold@infosec.exchange’s keynote: The avalanche of security reports from #OpenSSL’s point of view: from 9 reports a months to 70.
1313 Kernel-CVEs: Wenn die Sicherheitslücke zum Normalfall wird
linuxnews.de/1313-kernel-cves-wenn-die-… #kernel #ki #cve #linux #linuxnews
