CVE-2026-53264
CVSS 7.8 HIGH: in the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: use RCU with deferred… EPSS 0.2% (15th percentile).
Vulnerabilities · 48 days ago
A patched kernel still leaves room for local root if the runtime knobs line up. This exploit is gated by unprivileged user namespaces and specific traffic-control options, so package version checks can miss hosts that are still reachable from a local foothold.
STAR Labs published working code for CVE-2026-53264, a use-after-free race in Linux traffic control that turns an ordinary user into root on the CentOS Stream 9 build it targeted. The fix landed upstream on June 1, 2026, and the working exploit is now public for a flaw that starts with Linux 4.14 and has fixed releases in several stable branches, including backports.
For Linux fleets that allow unprivileged namespaces, the exposure question is no longer just "is the kernel patched?" Runtime settings decide whether the bug is usable, especially on container-capable hosts where local privilege escalation can become a real path to full takeover.
CVSS 7.8 HIGH: in the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: use RCU with deferred… EPSS 0.2% (15th percentile).
2 sources covering this story
AI-Assisted Bug Hunt Uncovers Linux Kernel 0-Day in net/sched
AI-assisted research uncovered Linux kernel use-after-free allowing root escalation
Researcher Says AI Helped Develop Linux Traffic-Control Race Into Root Exploit
Researcher Says AI Helped Develop Linux Traffic-Control Race Into Root Exploit | Read more hacking news on The Hacker News cybersecurity news website and learn how to protect against cyberattacks and software vulnerabilities.
Part of the PlainSec briefing for 2026-07-28