Vulnerabilities in the upstream Linux kernel — local privilege escalations, use-after-frees, race conditions, and the subsystems (epoll, netfilter, io_uring, eBPF) that keep producing them — plus the downstream impact on Android devices and long-lived LTS deployments. Combined article + CVE feed for the Linux Kernel beat.https://0daynews.com/en-ushttps://0daynews.com/articles/2026-08-29-openai-agents-cve-2026-53362-linux-kernel-kev/https://0daynews.com/articles/2026-08-29-openai-agents-cve-2026-53362-linux-kernel-kev/CISA added CVE-2026-53362, a Linux kernel IPv6 privilege-escalation flaw, to KEV August 27. OpenAI's agents exploited it in-house. Patch deadline: August 30.Sat, 29 Aug 2026 10:00:00 GMTLinux Kernelarticlehttps://0daynews.com/cve/cve-2026-64600/https://0daynews.com/cve/cve-2026-64600/Nine-year-old XFS race condition in the Linux kernel lets an unprivileged local user gain persistent root access on default RHEL, Fedora Server, and Amazon Linux installs.Fri, 28 Aug 2026 00:00:00 GMTLinux Kernelhighcvehttps://0daynews.com/cve/cve-2026-72103/https://0daynews.com/cve/cve-2026-72103/Refactoring regression in Linux device-mapper causes cryptsetup luksSuspend to silently fail to wipe the LUKS volume key from kernel memory.Fri, 28 Aug 2026 00:00:00 GMTLinux Kernelmediumcvehttps://0daynews.com/cve/cve-2026-72130/https://0daynews.com/cve/cve-2026-72130/A remote NVMe-oF initiator can supply a short-but-nonzero AUTH_RECEIVE allocation length to trigger a heap write past the allocated buffer on the nvmet target during DH-HMAC-CHAP authentication.Fri, 28 Aug 2026 00:00:00 GMTLinux Kernelhighcvehttps://0daynews.com/cve/cve-2026-72135/https://0daynews.com/cve/cve-2026-72135/TPM character devices were registered with seekable file operations, allowing pread() with an arbitrary offset to read past the response buffer in tpm_common_read().Fri, 28 Aug 2026 00:00:00 GMTLinux Kernelmediumcvehttps://0daynews.com/cve/cve-2026-72157/https://0daynews.com/cve/cve-2026-72157/The Linux kernel ThunderboltIP driver overflows the skb frags[] array when assembling packets with more than 18 frames, enabling heap corruption by a malicious Thunderbolt peer.Fri, 28 Aug 2026 00:00:00 GMTLinux Kernelhighcvehttps://0daynews.com/articles/2026-08-16-august-kernel-drop-enterprise-cves/https://0daynews.com/articles/2026-08-16-august-kernel-drop-enterprise-cves/Thirty-plus kernel CVEs hit NVD on August 15. Three affecting ThunderboltIP, NVMe-oF auth, and TPM matter to enterprise infrastructure and flew under radar.Sun, 16 Aug 2026 16:00:00 GMTLinux Kernelarticlehttps://0daynews.com/articles/2026-08-16-linux-kernel-brcmfmac-wifi-heap-overflow-bpf-bypass/https://0daynews.com/articles/2026-08-16-linux-kernel-brcmfmac-wifi-heap-overflow-bpf-bypass/August 15 kernel stable drop fixes a Broadcom WiFi heap overflow triggerable by a rogue AP, a BPF verifier bypass, and 28 other security fixes.Sun, 16 Aug 2026 14:00:00 GMTLinux Kernelarticlehttps://0daynews.com/articles/2026-08-16-linux-kernel-can-subsystem-race-condition-patch-wave/https://0daynews.com/articles/2026-08-16-linux-kernel-can-subsystem-race-condition-patch-wave/The August 15 Linux stable drop patches 14 CVEs in the CAN broadcast manager and ISO 15765-2 transport: data races and use-after-frees.Sun, 16 Aug 2026 10:00:00 GMTLinux Kernelarticlehttps://0daynews.com/articles/2026-08-16-linux-dm-luks-key-wipe-cve-2026-72103/https://0daynews.com/articles/2026-08-16-linux-dm-luks-key-wipe-cve-2026-72103/Kernel refactoring regression in Linux device-mapper causes cryptsetup luksSuspend to silently fail to wipe the LUKS volume key. Patch is in stable.Sun, 16 Aug 2026 08:00:00 GMTLinux Kernelarticlehttps://0daynews.com/articles/2026-08-16-ksmbd-stack-overflow-cve-2026-72044/https://0daynews.com/articles/2026-08-16-ksmbd-stack-overflow-cve-2026-72044/CVE-2026-72044 patches a ksmbd stack overflow in multichannel session binding. Patched in stable; no CVSS assigned yet, no exploitation confirmed.Sun, 16 Aug 2026 07:00:00 GMTLinux Kernelarticlehttps://0daynews.com/cve/cve-2026-72044/https://0daynews.com/cve/cve-2026-72044/ksmbd stack buffer overflow in multichannel session binding: 40 bytes copied into a 16-byte kernel stack buffer. Patched in Linux stable; no CVSS assigned yet.Sun, 16 Aug 2026 00:00:00 GMTLinux Kernelhighcvehttps://0daynews.com/articles/2026-07-29-linux-cve-2026-53264-ai-exploit-root/https://0daynews.com/articles/2026-07-29-linux-cve-2026-53264-ai-exploit-root/STAR Labs published a working exploit for CVE-2026-53264 (CVSS 7.8), a use-after-free race in the Linux kernel traffic-control subsystem. AI accelerated discovery and exploit development on CentOS Stream 9.Thu, 30 Jul 2026 02:00:00 GMTLinux Kernelarticlehttps://0daynews.com/articles/2026-07-28-linux-kernel-tc-cve-2026-53264-lpe/https://0daynews.com/articles/2026-07-28-linux-kernel-tc-cve-2026-53264-lpe/STAR Labs published a root exploit for CVE-2026-53264, a use-after-free race in the Linux kernel's traffic-control subsystem. CVSS 7.8. Check your distro advisory.Tue, 28 Jul 2026 11:00:00 GMTLinux Kernelarticlehttps://0daynews.com/articles/2026-07-23-refluxfs-cve-2026-64600-linux-kernel-lpe-rhel/https://0daynews.com/articles/2026-07-23-refluxfs-cve-2026-64600-linux-kernel-lpe-rhel/Nine-year-old XFS race condition in the Linux kernel lets an unprivileged local user gain root on default RHEL, Fedora Server, and Amazon Linux.Thu, 23 Jul 2026 12:00:00 GMTLinux Kernelarticlehttps://0daynews.com/articles/2026-07-22-snap-confine-lpe-ubuntu-desktop-root-fuse/https://0daynews.com/articles/2026-07-22-snap-confine-lpe-ubuntu-desktop-root-fuse/CVE-2026-8933 (CVSS 7.8): snap-confine on Ubuntu Desktop lets any local user escalate to root. Affects 24.04 LTS, 25.10, and 26.04 default installs.Wed, 22 Jul 2026 20:00:00 GMTLinux Kernelarticlehttps://0daynews.com/articles/2026-07-08-ghostlock-linux-kernel-cve-2026-43499-container-escape/https://0daynews.com/articles/2026-07-08-ghostlock-linux-kernel-cve-2026-43499-container-escape/Nebula Security's GhostLock (CVE-2026-43499) — a 15-year-old futex use-after-free — hits every mainstream Linux distro. Escapes containers. Patch again.Wed, 08 Jul 2026 07:15:00 GMTLinux Kernelarticlehttps://0daynews.com/articles/2026-07-07-januscape-cve-2026-53359-kvm-guest-host-escape/https://0daynews.com/articles/2026-07-07-januscape-cve-2026-53359-kvm-guest-host-escape/A 16-year-old use-after-free in KVM's shadow MMU lets a guest VM panic — or, with an unreleased exploit, root — the host on Intel and AMD. Patched June 19.Tue, 07 Jul 2026 23:20:00 GMTLinux Kernelarticlehttps://0daynews.com/articles/2026-07-03-bad-epoll-linux-kernel-lpe-cve-2026-46242/https://0daynews.com/articles/2026-07-03-bad-epoll-linux-kernel-lpe-cve-2026-46242/A newly disclosed use-after-free in Linux 6.4+ kernels lets an unprivileged local user gain root. Android on affected kernels is in scope; the upstream fix is in.Fri, 03 Jul 2026 21:00:00 GMTLinux Kernelarticle