Six Linux kernel vulnerabilities were disclosed, with one having a working root exploit. No fixes were available at the time of disclosure.
The vulnerability or weakness
The disclosed flaw, ZDI-CAN-33367, is a local privilege escalation bug in the Linux networking stack, rated CVSS 7.8.
Earlier attacks and coverage
- Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers (2026-10-25)
- Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws (2026-10-23) - The Hacker News
- Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes (2026-10-22)
- Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed (2026-10-22)
- Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution (2026-10-20)
Business impact
Organizations could face significant operational risks if exploited, as the public exploit allows unprivileged users to gain root access.
Users affected
Users of affected Linux distributions, such as AlmaLinux, CloudLinux, Debian, and Ubuntu, are at risk and should apply patches promptly.
Build these skills
Sources
- Linux Flaws Exposed Before Fixes as Root Exploit Goes Public (Infosecurity Magazine)
