Topic

Linux Kernel: news, advisories and analysis

11 articlesUpdated 1 Nov 2026

CyberSecureToday covers Linux Kernel across 11 articles published between 17 Sep 2026 and 1 Nov 2026. The coverage includes 10 vulnerability advisories and 1 analysis or guidance piece. 10 advisories are rated critical or high severity, and 5 involve flaws listed in CISA's Known Exploited Vulnerabilities catalog.

Stories on Linux Kernel most often intersect with Container Escape, Cloud Security and Active Exploitation, with Technology, Cloud & SaaS the most affected sector. The most recent story, “Critical Linux Kernel IPv4 TCP Use-After-Free Flaw Enables Remote Root RCE (CVE-2026-98432)”, was published 1 Nov 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ResearchCloud & SaaS
Critical Linux Kernel IPv4 TCP Use-After-Free Flaw Enables Remote Root RCE (CVE-2026-98432)
CVE-2026-98432, a critical 9.8 CVSS flaw in the Linux IPv4 TCP stack, permits unauthenticated remote code execution on servers with MPTCP listeners.
Mei-Lin Chen1 Nov 202614 min read
ThreatsCloud & SaaSCritical
Google Cloud Run Linux Namespace Confusion Flaw Enables Cross-Container Node Escape CVE-2026-49102
Google Cloud Security Bulletin GCP-2026-068 details a gVisor sandboxing namespace defect in Cloud Run worker nodes permitting local privilege escalation.
Aisha Noor28 Sep 20269 min read
ThreatsCloud & SaaSHigh
Google Kubernetes Engine Container Escape Vulnerability Enables Node Compromise Across Multi-Tenant Clusters
Google Cloud discloses and mitigates a high-severity container escape flaw in GKE node kernels, preventing unprivileged workloads from compromising host nodes.
Aisha Noor24 Sep 202617 min read
ThreatsCloud & SaaSCritical
Linux Kernel Fragnesia Flaw Weaponized for GKE Container Escapes via Socket Buffer Page-Cache Overwrite
Google Cloud and Linux maintainers patch CVE-2026-46300 (Fragnesia), a critical ESP-in-TCP kernel bug enabling container breakout to GKE node root.
Daniel Okafor20 Sep 202615 min read
ThreatsCloud & SaaSHigh
Linux Kernel In-Kernel TLS Receive Path Flaw Weaponized in Active Multi-Tenant Cloud Attacks
Threat actors weaponize improper condition check flaw CVE-2025-39682 in Linux kernel kTLS receive path, triggering out-of-bounds corruption in multi-tenant workloads.
CST Editorial Desk19 Sep 202611 min read
ThreatsCloud & SaaSCritical
Public Exploits Released for Four Linux Kernel Flaws Enabling Local Root and Container Compromise
Working public exploits released for four Linux kernel flaws—DirtyAH6, TUNderflow, PPPoEject, and DiagSpill—enabling local root escalation and container escapes.
CST Editorial Desk19 Sep 202613 min read
ThreatsCloud & SaaSHigh
Linux Kernel Crypto AF_ALG Socket Race Condition Flaw Weaponized for Root Escalation
CISA adds Linux kernel cryptographic socket race condition vulnerability CVE-2025-39964 to KEV catalog following active root privilege escalation attacks.
CST Editorial Desk18 Sep 202611 min read
ThreatsCloud & SaaSHigh
Linux Kernel ebtables SNAT Out-of-Bounds Write Flaw Exploited in Active Attacks
CISA adds Linux kernel ebtables SNAT memory corruption flaw CVE-2026-53266 (CVSS 8.8) to KEV catalog following active hypervisor privilege escalation.
Mei-Lin Chen18 Sep 202610 min read
ThreatsCloud & SaaSHigh
Cloud Container Escape: Linux Kernel cgroups Flaw CVE-2022-0492 Weaponized in Cloud Attacks
CISA adds Linux kernel cgroups v1 release_agent vulnerability CVE-2022-0492 to KEV catalog as threat actors weaponize container breakout exploits.
CST Editorial Desk18 Sep 202611 min read
ThreatsCloud & SaaSHigh
AWS Security Advisory: Linux Kernel vhost vring Cache Corruption Flaw CVE-2026-74580 Patched via Livepatch
AWS publishes security advisory ALAS2023LIVEPATCH-2026-343 addressing a Linux kernel vhost vring metadata cache corruption vulnerability (CVE-2026-74580).
Daniel Okafor17 Sep 202613 min read
ThreatsCloud & SaaSHigh
Linux Kernel Watch Queue Privilege Escalation Flaw CVE-2022-0995 Weaponized in Cloud Attacks
CISA adds Linux kernel watch queue vulnerability CVE-2022-0995 to its KEV catalog following widespread weaponization in cloud container breakout attacks.
Mei-Lin Chen17 Sep 202610 min read